last executing test programs: 1m42.032234619s ago: executing program 4 (id=1904): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c6700000000040000000300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07001500"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x1, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x3, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) preadv(r6, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 1m39.987859227s ago: executing program 4 (id=1913): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000180)=@arm64={0x3, 0xb, 0x2, '\x00', 0xffff}) 1m37.548931933s ago: executing program 4 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r3, 0x9, 0x7, 0x1, 0x101, 0x0, 0x48, 0x0, {r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x3, 0x2, 0x400, 0x5}}, &(0x7f0000000400)=0xb0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x60, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}, @generic="61b5e68d88fac5af90388ad8e63d6ca615fae0591e16cd4602b90f3ca1692a3d519756aca49ede6341cdb3c11fb9fa73905357e0dc50359c48f42fd83627ec805049935a9a3f9d86"]}, 0x60}, 0x1, 0x0, 0x0, 0x42804}, 0x4010) 1m36.251136348s ago: executing program 4 (id=1933): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sched_setattr(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000200)="28fc96532806b7c5c415d3e2c201b8d7ef79b53d423da35145b2999416d3dd871ce420f451fff9c8b1b1cd31479e764afe7116836895dc8afc121e2263c1603e946aa5050000000000000006a1a0aa441e2b2cc8ddc4135f866c7a83191ffa66b45764a43c776a750f929d7a86b4309a8d73bab3ae5a93d2c37a42e472d5250a15d8894702de6e334a5be5ca97", 0x8d, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) accept4(r0, 0x0, 0x0, 0x0) 1m32.934336326s ago: executing program 4 (id=1938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000fdff00000000000000000000000000400000006cabc7caa0a70b3dfdf2cd6f004c94a97a7db5156d5edec82507f0fd836ae34aa93e018acaf4d9623948c2ec0b8ac63565796b35f8b51794c94274babce5d5b601e2df36f36fc2556123e52027e89cc11a61d3ec4c0f4480159bcba6103a5718a69f5f49c8143ea32f3aaf923b234ec8d89fa06c8877b47d9de3bbb3a3a2e985db1727e243256fda3138628297fa06c3c4412ccd5140dff66ed63e52f8153856c556bcf4b1f425dc97e2faa153b71afa4213fe6ccd79357e40c9b923398facff77"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup3(r0, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x0, 0x9c3a, 0x1, 0x8, 0x0, 0x0, 0x0, 0xffffffff], [0x800004, 0x100001], [0x91, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000]], '\x00', [{0xfffffffc, 0xfffffffe}, {0x100}, {}, {0x9, 0x4}, {}, {}, {}, {}, {}, {0xfffffffd, 0xc}, {0x0, 0xfffffffc}, {0x1}], '\x00', 0x301}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000340)={0x1, 0x3, 0x802}) ioctl$DRM_IOCTL_WAIT_VBLANK(r9, 0xc018643a, &(0x7f0000000380)={0x10000000, 0x8, 0x20000020000}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r11, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r11, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c003, 0x0) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r13, 0xc0d05640, &(0x7f00000000c0)={0x2, @meta={0x48435655, 0x68a0f3f4, 0x274e, 0xb53a, 0x3b0cecc3}}) r14 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x301800, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r14, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r12], &(0x7f00000003c0), &(0x7f0000000340)=[r15, r15], &(0x7f00000001c0), 0x0, 0xff}) unshare(0x8000800) connect$inet6(r7, 0x0, 0x0) 1m32.54389865s ago: executing program 4 (id=1940): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10220500005e5bcc0190"], 0x0}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x2000fb) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x3, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x2, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x3, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0xc, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x9, 0x10, 0x7, 0x9, 0x80e8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x9, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x2000003b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0xd37, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x6, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0xfffffc98}]) readv(r2, &(0x7f0000000140), 0x10000000000001f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r9 = socket(0x15, 0xa, 0x0) bind$l2tp6(r9, &(0x7f0000000200)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x81, 0x2}, 0x20) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r8, 0x1) 1m31.830367602s ago: executing program 32 (id=1940): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10220500005e5bcc0190"], 0x0}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) openat$ppp(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x2000fb) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x3, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x2, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x3, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0xc, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x9, 0x10, 0x7, 0x9, 0x80e8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x4, 0x88, 0x2, 0x6, 0x9, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x2000003b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0xd37, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x6, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0xfffffc98}]) readv(r2, &(0x7f0000000140), 0x10000000000001f0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r9 = socket(0x15, 0xa, 0x0) bind$l2tp6(r9, &(0x7f0000000200)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x81, 0x2}, 0x20) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r8, 0x1) 8.326116723s ago: executing program 0 (id=2276): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x2, 0x0, 0xfffdf038}, {0x20, 0x0, 0x2, 0x3b63}, {0x6, 0x0, 0xfe, 0x4}]}, 0x10) r5 = socket$inet6(0xa, 0x80005, 0x14) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x2501003) fcntl$getown(r3, 0x9) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x64300, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x80010, 0x15, 0x2, 0xb30, 0x1, 0x168, 0x1}}) sendmsg$nl_route(r2, 0x0, 0x2400c080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b1600000000000000000200000818000480140001800b0001006e756d67656e0000050002", @ANYRES16=r7], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.926190218s ago: executing program 2 (id=2279): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) getpeername$packet(r0, &(0x7f000001c740)={0x11, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f000001cc80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @remote}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="73572a4698be2ec45631887ac8dab32717187c355d7a14c17eab839f49e0cfe7c1b9c8d3b8b0e8cca023e5ccea53", 0x2e}], 0x1, &(0x7f0000019580)=[@rthdrdstopts={{0x58, 0x29, 0x37, {0x11, 0x7, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x3}, @enc_lim, @hao={0xc9, 0x10, @mcast1}, @jumbo, @ra={0x5, 0x2, 0x40}, @jumbo={0xc2, 0x4, 0x7ff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x200, 0x29, 0x37, {0x32, 0x3d, '\x00', [@generic={0x8, 0x8b, "3ef42b033cfdacf8fec4850d9d662dcda38372aca4e8266bc0316386714007b9e0f205a0895dd6c536c81bdc519fce7ffd464219089d7e73794fe9c52c8590a1b0cd5fbd60bced6c4f392f693b84036e5cc843fe61bf8fdd76d4cf52dc2e0b5de7c8b9c838106edd13bbce0fa5ab60734be9582d7370457e6d7f5076458a53af1ca69a219ef9eabca1f1ec"}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x94, 0x70, "c24de504dff0e4431f29b5467990ecd3daebdb26692d2cc63375f5027d24fc35fc96f22a147b2646d870577a0707353addb62968a19848450c7f59450c9d39a1f7df0d623f10ad604b0298c88410ec9089a190b0737acec7684a506cdfe5eafcbef2eb6a5cf9aea0b9d57c3f9fedaf1f"}, @generic={0x2, 0xba, "d4eb543532386d69ab95182efd0ca7e502e0e131a36a0fb90cb23af84278f51eb1f77cf78029c9493b10fc2b34814aa1970ea828b7a094187af9bc2ff230ccb19922aa8fbf940c3423e436cee6e54935434431d969d903e5324e510ead8a6d9db955f4759e2b4808df0a5e630998f480670630d255ec4b4b1881c60c716b923a8a97c163203247f2f35c4cc35141d7041a1a8a479c4385a0fff2c1924687b65338213057f1467ddfa9f0da798e95b02ab163f084086312f8361b"}, @ra={0x5, 0x2, 0xcf8}, @calipso={0x7, 0x20, {0x2, 0x6, 0xbf, 0x7, [0x200, 0x9, 0x8]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x2, 0x9, 0x0, [@mcast1]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x3c, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x48, {0x3, 0x10, 0x9, 0xc, [0x1, 0x9, 0x9, 0xacd, 0xf, 0x81, 0x10, 0x8001]}}]}}}], 0x328}}, {{&(0x7f00000198c0)={0xa, 0x4e24, 0x6, @remote, 0xd}, 0x1c, &(0x7f000001ab40)=[{&(0x7f0000019900)="6a9d9a9a3c8a5672550aefa08f0d27172bbaab6747255a7fd8dd604fdb0d880584a34ba5d611779e1167bc3e", 0x2c}, {&(0x7f0000019940)="47842eb25962b02d7760ba201a84d565d9a967be7113d87d2efd1f7a0e417e8b488f0d6aac158c8555514dc477eedd9e22a96ff287b4883dc06f03ef5b2d5536b94c6a210b411434fc5e988126f5ae4b114a3de41d30151fb54b51ef86c04c0a8b3da993a5eab565ed2d2db6417c848f13a32c823d3bcd9369bb89294c5d8c25d4ac189e639713da0c16075e1d76ebdf4f9cb168dc9352c3dec5", 0x9a}, {&(0x7f0000019a00)="18ac15708f9d1ced1ded195bc436624c779c42d0cbbf644e31e99103fdfd497f3b56343b1ef9fd323e7d021e0d2ecd02a130ba42cc00dbfaedc5afeab80f101a4f5ad6bb5d0d07a954493c916b9782e4be4105a30eabe375b0833656ab0d5fabf0731c312d3b44e0bd500a34cd039888f0647245d744c3bf8d8595634546a06a50c81a97b31341c1564526ce3caba9e7acfad380be2e39b3b5f597e4b85ae5b9f855e3cef5ff5c3ed3cc0904cce06e8295b8edf81d6c9d68", 0xb8}, {&(0x7f0000019ac0)="80bfb0d9582a0fc9d658e7816abe3008e04791d9a6daf86d3ae22ef0118594a63f67bbc3676b2ee88098ac90943572e9e63d701b5de41deed354c56d49b2432c8ea2423422a4f85f5e26203d0e39fbb810ef5bdfada37a34788ba49bfe791f3f21a8d88520a7154a6cd5e4fffce404b2f0", 0x71}, {&(0x7f0000019b40)="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", 0x1000}], 0x5, &(0x7f000001abc0)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xe7b0}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x1d, 0x4, 0x1, 0x80, 0x0, [@local, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffc}}], 0x70}}, {{&(0x7f000001ac40)={0xa, 0x4e22, 0x2, @mcast2, 0x2}, 0x1c, &(0x7f000001b040)=[{&(0x7f000001ac80)="7722a93920f8da98185b3fe4cbdfe010a66cbdae5b200950ce3a6220a5d2fe60a395e4febba8c3aac30734303a3202857a52f37ae60ee016c1787b0b97f93b087c4ebd166384ced39ee27e1e0546f8f09625857acc47dd01a274cbf03ca7c53f96549bc96b22dede05710e14389b90a64284476cfacdfb8ab64fac162443796ff099", 0x82}, {&(0x7f000001ad40)="578dc97baa6a949f777b39f6e829458572612ef57fcc287a859addadf9804affe0d7c2178c3f67fc88087100ec79caaa1f2813fe760b8290df726d57a4ef8f0c1f274505e5fbea92b5b579f55b53f4b333070c0ed1aba300250d00ef24ba607eac4fc3775367a6fd00c186310b3b6c8b6e630dffc0160300a3e680edae92a51f87ac942b73437121a5593e37434265e51506285efb417d78a586f0b98901394e51488b26dbc5f836671cf95d5b499aa347c1deb5373806369c978a41a037", 0xbe}, {&(0x7f000001ae00)="48f8dcf183f43884ee6b137b5464a496cacc972ef30de051b23c0f5b715f711f63eb5ff76417fbbe22f85c703a0091e626ab845b", 0x34}, {&(0x7f000001ae40)="44a70e211199f5c8e9d68dc69a6e6f3fe528321f431c488bf30d0748d0edc8ba2a4223d525abfe2a9f78bff45e0e8a45f862755b02020ccb71eb989e6e8112fedf92c5c60d081eef952afc9780cb3070f487c64e1cc563440008109007f301ef32e32dafe5b38ca768181d270067660be861233dad240baf11489581fbacda92fc5c53ba6316eb1d330a36195b332fb41b9086f857f2f68826b903", 0x9b}, {&(0x7f000001af00)="f3b104764806fb760259bfb8bf272d7a876bc32f98faa7da1d60cfbc504b9d6c0defd4003277d8f611488c58cce95903927a9730bcb7b2f47a9e2f1c4e42db90111d6607658ebdb4755c7f2fe228d713bfedc06259a8cd0acd807a6f3126c2170aeafa1fc68d416ef5a85590e9b3b88c58629dc92160148c", 0x78}, {&(0x7f000001af80)="ff980641a605697beda581dc5980cc59c7ace9c6eef30fb31bd9495aa0774608a11b33bf4e4a310b38f8caf6cc6d2fa94ff109ad82b9ad8e85d4490d7903ebeb1fe14c4496ef73e963785f53a984bad2ca83bbfb9b92796b6cda16d92a38fe09960e9df428e2eca5c60e1cbef724eb87d45f22c162a9639b6e5d40342dc10b464708ad24ddc30f2689e72be8e6ff15af6cbee9d3d70aa8677d6ca35af0293560ccc790d3d07aad78c3", 0xa9}], 0x6, &(0x7f000001b0c0)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0xfffa, [0x4d3, 0x4, 0x401, 0xdfa, 0x377, 0x4, 0x1]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x84, 0x1b, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @calipso={0x7, 0x18, {0xe08eb74c4c7f7832, 0x4, 0x2, 0x9, [0xc0000000, 0x3]}}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0x9, 0x95, "6904f75d545655d44c27dd1dfe549ca6e6e20242edc279e67cbab3d5d49c1c83bb7c9b3478c8d91253a8c455bdbb8e41ffc2d854d877c88a6cac7e6edb4f1b21111ecbc395d71f73cda3d36188f560346a48521d563642df8878554eb896edd703f04b2aff1ec0fdc5ddd5c73c8c952d5156e698914e7ef4c7f83adb630e9b00cce1c0b76a1246142e508ed6666a041594549e62b5"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0x1, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @pad1]}}}, @rthdr={{0x38, 0x29, 0x39, {0x11, 0x4, 0x0, 0x5, 0x0, [@mcast1, @mcast2]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x258}}, {{&(0x7f000001b340)={0xa, 0x4e24, 0x4, @empty, 0xbcd3}, 0x1c, &(0x7f000001c440)=[{&(0x7f000001b380)="8cd88040bbc876fd", 0x8}, {&(0x7f000001b3c0)="06ecec5a7f2822c01c51c2419e5f14fc688e3f75c3d8419bd309d894d79ca03a1e5d7a92fc4abaf7af791348e518de8cfa6de5c828214f5d80ef0ecaaa41e34c3e0975178e231f68c8381b0e4c2aad7505fcc9a17bf861704e32a966ab067b8fe5a1", 0x62}, {&(0x7f000001b440)="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", 0x1000}], 0x3, &(0x7f000001c480)=[@dstopts_2292={{0x1a0, 0x29, 0x4, {0x11, 0x30, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic={0x2, 0x41, "fa75cbeac1c5b2f7832b74297e7fe7a6a9141ba869c6324527173c9889632e920ca2aa82bec6759e5de9e84e0867a6189f2ee73ae41e6379880dbf62b532f05647"}, @ra={0x5, 0x2, 0x3a58}, @generic={0x0, 0x77, "9f97a216e34d8c001d7843b08c48afff135dc4d8e816bef2e6a511b89b399ad7c44303e3f0b79c25d97b06ba40012a030751a571642be76f1d204685ed3106ba65d40ff549e6cc8ff86c0c80893a07b600fa9ed88ae68769acd8b5d94467cf7d52976af65553bf373e5881346fa53d53899b1672105e1e"}, @hao={0xc9, 0x10, @local}, @generic={0xc, 0x9b, "a407e3e46fcfc7604c6762f8d63cbcad72b85e02c0125f8e9921a6c80436d383344a8692293a62b34f5907f45b47b0ff443e1e50b976a879224cd73e40cc4cda24fa59cb8d374e44ce8277e8d8487efa5960fbc2c0168225306526350680f675dc9ad6e2dc1e4c3303844a68fda6a6d04da74ba354b5e035ce879d11492bb6baa2681dd30e19597a6ce725029b7cbe0e673390f80de82c311d85a3"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}]}}}], 0x1c0}}, {{&(0x7f000001c640)={0xa, 0x4e21, 0x8000, @mcast1, 0x550}, 0x1c, &(0x7f000001c700)=[{&(0x7f000001c680)="6685ed49955c9c3ed4d7efbc63f01315d44123c44f6af013215f6f57941ff098dc7a290efd8477d4106c82351379ec1550c65dae6233270ff8d4fa46bcc4d42bba", 0x41}], 0x1, &(0x7f000001c7c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x0, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}]}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x3c, 0x6, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x3, 0x2a, "88406e0cc5343fdbe9e6bded840ab3b88a083491df38aea34080b56f9d68045c8fdf967bbcfdb4b785fb"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts_2292={{0x38, 0x29, 0x36, {0xff, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xff}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r1}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x33, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x282b}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@pad1]}}}], 0x178}}, {{&(0x7f000001c940)={0xa, 0x4e23, 0x7, @loopback, 0x692}, 0x1c, &(0x7f000001cc00)=[{&(0x7f000001c980)="6957c6618ad3c463c7b5ec09762e4a7bc4015178b4c3e5c1c87bb801241e5becf4f2d091c888b16a84cd815c00e2b5dae51bb1a8489d6bdca4331b58fe5272645d6569692304f52058565abe7d3528e1cf6b9aebc5b2fa6d7d5800ee122a6a9d51dd05883aceaf88c69eb37e6be4631ff27acc0025bbbdfe6125ad3c75c3a77e", 0x80}, {&(0x7f000001ca00)="1cd2963f40193d514fd9bebdc7161495fc6dd8ff9707f2826de29cb6fadfd3d6692b8a5673b0e90bf3fd4c390ab4f3df0e62f40964d3ef3a72d820edd94dc7115a713c651895b17e88d05c39ce936fb01bbb811e31aeec154379e89930d247015f92d462e4b6089e5a121a86c655acb06aeacb66e6fd68b50da589230bc723e7ff70db6e3df301a688471e89a4ad9a744b059e9f7b4ea3450abe1359f84da4c69d179514fb90708f718a8bd6da190ebb960304980e203eb07a6fd5aa011b4ba09ff1def9081a780b0a146143", 0xcc}, {&(0x7f000001cb00)="a68d2e726ee6347ab6c9161254187aabe5c3f9c33772428dc4832425a456b3a1a362379d02d798be73aec427a8384bac91", 0x31}, {&(0x7f000001cb40)="8be123703d331ee1b400674a8ac95bf2f4f7c24dd4ff0e0eb67387bd72777889beeca1a0b1eda0419412cbf86867c42ab5deb41ef6d0283d2822f072e1631816ac936c088119aa87c32e590236aec37699f5f72c2c3a858513bfca6d37c0161cb48d7fd1481ed13965bab6e16b975abed44bab6be89adaa52600831637663282517bfc75e70a6d4788a64e9f1d3b8d40f225621cd64001fe2fd325", 0x9b}], 0x4, &(0x7f000001cc40)=[@rthdr={{0x28, 0x29, 0x39, {0x21, 0x2, 0x0, 0x9e, 0x0, [@private1]}}}], 0x28}}], 0x6, 0x8000) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 7.708558274s ago: executing program 2 (id=2281): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c6700000000040000000300", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07001500"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x1, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x3, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.346344826s ago: executing program 2 (id=2287): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001000020dc00000000000000"], 0x18}, 0xfc00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x1af) read$FUSE(r5, &(0x7f0000002700)={0x2020}, 0x2020) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r6, 0x0, 0x6) read$FUSE(r5, &(0x7f0000004740)={0x2020}, 0x2020) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x6}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 6.015743214s ago: executing program 2 (id=2288): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c6700000000040000000300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07001500"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x1, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x3, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.954434593s ago: executing program 0 (id=2290): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r0, 0x402, 0x7) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') read$midi(r1, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r3, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000300)=""/133, 0x85}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x2, 0x2, 0x7, 0x0, 0x81}}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, r2, 0xea9c6000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000004f80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="b0", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000100)={r6, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={r6, 0x9420}, &(0x7f0000000080)=0x8) 4.203967369s ago: executing program 5 (id=2293): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_getoverrun(r1) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000200)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x2, 0x3, 0x4000, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) 3.732419298s ago: executing program 0 (id=2294): r0 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1a\xa8\x17x\x15\"\xddU\x02JJe\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1\xa4~g\x11\xc9\x8b\xe2\x13\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x4a1, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000001a00)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000400)="5a6da0b59d", 0x5}], 0x1, 0x0, 0x0, 0x48080}], 0x1, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r7) socket(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f00000002c0)='ns/time_for_children\x00') ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r8) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000000)={0x2, 0x0}) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2300"], 0xffdd) r10 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x0, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x2e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.490469974s ago: executing program 1 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf7, 0x79, 0x48, 0x20, 0x458, 0x7005, 0x1a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_COMMENT={0xf, 0x1a, '/dev/nvram\x00'}]}, @IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffff}}]}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x12}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3ff}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000106140000001100010000000000000000000100000a66324c2539e74578f2b4b998649bed5aa482ab5fca31a06477366831"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) sendmmsg$unix(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mq_open(&(0x7f0000000300)='3\\m\xcd\xef\xf2%D\xc2\xd8\x1b\x15y]\x0e\x1f\xd9\x16\x94\xf4\f\x12z_\xce\xf6\\\xaaz\x99PZ\xc3.\xce\xdc\xd1{\xb9\xb5\x96\xea\xab\x8eR\xff\xd3H\"B\xa0\x89\x94\x1a\x9e\x16\x04\x19\x8a&\xc1\x88y\x12\xba\xac\x9c\xdb\x12%\xcbbY\xd1\xe4o\xbb \x05\x00\x00\x00\x00\x00\x00\x00\xd5Gf\xc4\xb1G\xd4\xa4k\x1d\x15{\xe6\x86\x95\xa0\xd7?\x99\xa1\x88t\xaf`N\xfe<\xb9\xbd\xc1\xd1\x06\xac\xe2\xa9z\xd1\x00\xad\xa7\xe0\xc3Y#\xf1\a\xef\xc5\x05D{\xc5\xf1U=!\x8f\n*\xe1\xd2@\x15\xff \xe7\xca\xa07\xeft\xc4I\xa1\xb8\x9bUW\xceX\xd0\xf69MK\x11\xa1\x8c\xa5.`\xfd\xbek\xa4\xca\x80\xaf\x10\x9e\xc9\xeb6\xaf;\x1f\xa8\xf1\x95\x9b\x11:\xe5\xc9\vM[y\xcb#z\x99)\x02\xeeQ\x85N\xdb\xcb\xffl\'\x1dC\xfe3\xb4\v\xd3r\xa8\x7f\x82\xaa[\xf9\x19L\x8f\xaa\xd3a\x95\x9d\xe0\xae\xaf\x8f\x05\xb3\xcd\x8e\x17\xb7\xebK\xe5P\x16\xe3\xc0\xfc\xbe\xc8\xc2', 0x40, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x4008804) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x358, 0xa, 0x148, 0x0, 0x60, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'hsr0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x358, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x40, 0x0, 0xffffffff, 0x7}, {0x81}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x4, 0x2, 0x2, 0x1, 0x1]}, {0x2, [0x2, 0x6, 0x2, 0x1, 0x2, 0x5], 0x1, 0x1}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xb5c3, 0x5, 'pptp\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x528) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001a00), 0x80981, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3.255684653s ago: executing program 3 (id=2299): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x0, 0x3, 0x7}, 0x3, r3}}]}, {0x21}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x4) r7 = socket$inet(0x2, 0x6, 0x10000007) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getsadinfo={0x88, 0x23, 0x100, 0x70bd2a, 0x25dfdbfd, 0x0, [@etimer_thresh={0x3, 0xc, 0x5}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd27, 0x70bd24, 0x70bd28, 0x70bd2b, 0x8, [0x80000001, 0x9, 0xbd93, 0x6bca, 0x0]}}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@mcast1}, @srcaddr={0x14, 0xd, @in6=@ipv4={'\x00', '\xff\xff', @local}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400ff0000000000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002400000001708000140000000090900020073797a3200000000140000001100010000000000000000000200000a22ad24d7615bac54effe9d1db8b16d8d93d60ed9837d43fbc812493eb82bfcf944e448f96b4217cf155fb8b88619e0189bf3d06d381640902fa76a0fdb04e255f91b75290ddd651f78c7c7a4406d4b0bc7a7616d1e65b69e77d60d17ca65ea68d1fc27b4945e4a0d9d95522daba1129fb3f7a59b37698b9aec47"], 0x78}, 0x1, 0x0, 0x0, 0x4008891}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x1, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) setsockopt(r8, 0x84, 0x14, &(0x7f0000000040)="02000000", 0x4) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast2}, &(0x7f0000000040)=0xc) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@local, @local, @loopback}, 0xc) 2.450249501s ago: executing program 3 (id=2300): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x198c, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x30}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x3}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x1d}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) 2.394383512s ago: executing program 5 (id=2301): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1451c55f850600060000002eb88c0330e4f9bfb82144c7568dc9bfd93c462894f56a907d9cf25879f8d455228fa7b921033d54475d600b28a1dcfc4fb4e0f5afd2b618fa883066ec941a048da1f23041bbbd3d164fa783fde5c402ed2df10e88c941f9c8cdd59503679be3"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.093496169s ago: executing program 5 (id=2302): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) getpeername$packet(r0, &(0x7f000001c740), &(0x7f000001c780)=0x14) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 1.971831378s ago: executing program 5 (id=2303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000010040), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r12, &(0x7f0000000000)={0xa, 0x24, 0x8, @mcast2}, 0x18) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001900)={0x5, &(0x7f0000001840)=[{0x4, 0x2e, &(0x7f00000000c0)="93f8759da32cd16daf94934010702ff85e951202d7140ff24008dfaf2a4f7e2c91b853a08a67b41710f3d2e728b7", 0x0, 0x1}, {0x200, 0x6b, &(0x7f0000000300)="07d7324433f87b76c35ce6b942d7a1e052d7879c5e0d3d42081e2913f5a3514ef1247bfc16ce2e1f5b63432d315eabf262aa50210b43ebf342ed62d63b84a9770a7dee3825e6e784de356098ad3df11b4f907571f011bc5bdefe2e753ae0719ca6079021bf739351e0efc6", 0x2}, {0x7, 0x3a, &(0x7f0000000380)="75e3bed8b752054448738b48bef8c23eda67e3e56c967e835af00f7d8a3b7978ec90ebdacbe302908ac3afd27ff84cf19439950f8ca6f483a1f0", 0x0, 0x8b1717885ea28b94}, {0x4, 0x63, &(0x7f00000003c0)="e02c723e2a2bc68b8e5f860d9353dced78cbf974d066d88b6a80263accc10a25b7f7bbc11774593edd5e2daa604f779a36c2ba3cd484f22e8f63e4082b4c079b273a7f7b51883e4f1c64f8a9395e40b4f2a2aa851d887872fcbe90762bd9939e1cbfe1"}, {0x6102, 0xc8, &(0x7f0000001740)="1d4bbec54ba3a1324258330577df2efb79f092d615bf38817fc0cc3d495325279c5a33e38c8e77fb6d2c2523f6b1ff9e301575ca5ffd66cf4cd6adca6558629c1c8cfae5a0b82c4614068ce21b8ab1c4b06eca4feeaf901591b6c418847af94ed68b6f57ab9e8d845ba8495cf83c6f7164086e4d505df8370ae9b892da75ce3d82b518b35ed7c844d128be9841022ecc70199af580139e8ea717cd924e50cc097222057e1dbc7124fc0f444d082f230559aecbcf82374d7d28afee9ef055c3a5edcfe62bbc30f9d3", 0x0, 0x1}]}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r11, {0x10}, {0x0, 0xfff1}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x1, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0x401, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0x9, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x9, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x201, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x2, 0x9, 0x4f2b, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000003, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x653a, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x3, 0x4, 0x9, 0x9, 0x1, 0x6, 0x3, 0xe, 0x0, 0x0, 0xe, 0x0, 0x9, 0xffffff32, 0x5, 0xf, 0x2, 0x3, 0x7, 0x80000000, 0x80, 0x8000, 0x1000, 0x7, 0x200, 0xae, 0xffff, 0x5, 0x4f67, 0x4, 0x8, 0xcd, 0xffffffff, 0x8, 0x4, 0x2, 0x9, 0x7ff, 0x0, 0x10000, 0xe385, 0xff, 0x3ff, 0x9107, 0x2, 0x9, 0x81, 0x6, 0x4, 0x9, 0xfffffffa, 0x8, 0x100, 0x4, 0xd, 0x5, 0x6, 0xffffdaac, 0xf, 0x3, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0xfc, 0x7, 0x9, 0x1, 0x0, 0x401, 0xc6cb1260, 0x8001, 0x3, 0x5, 0x480e, 0x8000, 0xb, 0x7, 0x5, 0x0, 0xfffffff9, 0x4, 0xe, 0x1, 0x9, 0x3, 0x1, 0x8, 0x1, 0x4, 0x7fff, 0x6, 0xff, 0x0, 0x9, 0x8, 0x8001, 0x101, 0x515f, 0x377, 0x4, 0x2, 0x4, 0x6b, 0x1aa13142, 0x1, 0x7, 0x0, 0x5, 0x91e, 0xfffffff7, 0x2, 0x9, 0x6, 0x8e3, 0xd7c9, 0x2, 0x2, 0xfffffffa, 0x81, 0xa4bf, 0x1, 0x3, 0x400, 0x8, 0x1ff, 0x4, 0x3, 0x4, 0x5256, 0xe3, 0x8, 0xa, 0x538, 0x37c1, 0x7, 0x9, 0x1000, 0x9, 0x631d, 0x1c, 0xa, 0x3, 0x100, 0x7, 0x81, 0x8, 0xfffffff6, 0x45, 0x1, 0x6, 0x8, 0x484, 0x7, 0x9, 0x17, 0x68000, 0x5, 0xa, 0x2, 0x10001, 0x7ff, 0x2fb, 0x4, 0xfffffff8, 0x8, 0x29, 0x0, 0x1, 0x4, 0xffffd481, 0x4, 0xc7, 0x5, 0x800, 0x3, 0x1, 0xcf03, 0x7, 0xdd2, 0x2, 0xcda, 0x1, 0x2, 0x7fffffff, 0x5, 0x6, 0x9, 0xf30, 0x10006, 0xb84, 0x80, 0x6f0ab25b, 0x10, 0xfffffbff, 0x0, 0x1, 0x4, 0xff000000, 0x4, 0x4, 0x0, 0x2, 0xfffffffd, 0x2, 0xa1b, 0x1, 0x5, 0x203, 0xb, 0x1, 0x9, 0x2, 0x2, 0x4, 0xfffffff3, 0x2, 0x2793, 0x5, 0xfffff23c, 0x8, 0xffff7fff, 0x3, 0x4fa, 0x401, 0x3, 0x2, 0xba4, 0x7146, 0x0, 0x4, 0xc, 0x9, 0x2, 0x4, 0x6, 0x6, 0x7fffffff, 0x2eb, 0x28b0afbf, 0x15181a07, 0x54, 0x8, 0x7, 0x0, 0x9, 0x4, 0x7, 0x0, 0x43, 0x7f, 0x5, 0xf700000, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000001940)) listen(r8, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x1, 0x0) 1.624084719s ago: executing program 1 (id=2304): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) socket$kcm(0x2, 0x1000000000000005, 0x0) (async) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) 1.231577154s ago: executing program 2 (id=2305): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x400) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x2, 0x1}, 0xfd}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a3000000000050001000600000005000500000000000500040000000014000780080011400200000005001500000000000d00030068617300"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000000000001000000070000000000000060000000000000000000000007000000830351444c1e61ac1414bb00000006000000000000000b7f000001000001017f00000100000001640101020000085cac1414bb00000008ac1414bb0000000be0000002000000016401010000000004001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffff0000000c00000000180000000000000000008e00000700000089076cac1414bb001c00000000000000000000000c000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbffffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a010100ac1414bb000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140aac1414aa0000000014000000000000000000000002000000f7ffffff00000000"], 0x128}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.23083655s ago: executing program 5 (id=2306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xed, 0x207fff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) syz_usb_connect(0x4, 0x322, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x6b, 0xd2, 0x78, 0xff, 0x17a8, 0x5, 0x8b9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x310, 0x1, 0x4b, 0x1, 0xb0, 0xb, "", [{{0x9, 0x4, 0x72, 0x2, 0x7, 0xc2, 0xf, 0xbf, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "06f414fa885d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x0, 0xfa}, [@mdlm={0x15, 0x24, 0x12, 0xe228}, @mdlm_detail={0x24, 0x24, 0x13, 0x7f, "63832544b5992729c2c21e14138e14d2545f2904857f9925c82a39c66ef2f284"}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x8, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xe, 0x3, 0x9c, 0x6, 0xd2}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x6, 0x5}]}, @generic={0x18, 0x22, "dc18ffa56b88c91cf826bf9af4fcb8b91f3729e3a30a"}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x9, 0x0, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x9, 0xdb, 0x1, [@generic={0x2f, 0x5, "e02d445a237f7e38d12a55d30b777b3e32b3b9122286b587f66d616520d33917272bf2b1b18aa485f6a33640c7"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x75, 0x23, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xceb4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x7f, 0x0, [@generic={0x99, 0x4, "bfc726695c3a35b0a914b9b91a695a36f352343aac85c7bea9a43db9c81f4a275d0a4be00dd66887c9d3baa5866910786d010b00057a7db0143fbd1d075a8bc9159a40cd5568ecaccaaea14420addc45cfaeb006a11388abd9d84e5d9c127688ffd3aa47edec6af3c344ffd12b654bee5fe77fd336d56cccb1fb2575dc0114994a0efd69ce5ec0e26cf59e8f357c40f1df22d5e70d1ea8"}, @generic={0x7d, 0x7, "4a1e14eaceb5f692d68d95b953f20a4793a92a54c2045455450c18cff69e544e7397ded88a1ed7c7902f7cbb5e8d93faf0a25b01a4281e19699ef38a607b5752c9e4c8f1ec8da0c58296914c1aeef1ca1b6081714d90621c808239b044ef2900beb4d2a2e5054a78ebce4f7161b437e51e3bb125b22c7eb250b77c"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x4, 0x4, 0x70, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7d, 0x8001}, @generic={0x39, 0x22, "fae95515649ed2d625428b910973775dfc23b93e4e5d5450df8e2ef7a672792b752e6a5c7463e513298db741b78a4a9d74d102f10f74f1"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x1, 0xff, 0xa, [@generic={0x6a, 0xd, "79ca462f6f6175a303cf504955387551b1b2e8fafda8f045e66fb05fc9680ddfcf3d9d4016678067b1abb9ff050bea53fb39965fbd50c4add37de35ad2d37cc0793fe772c5b42f049c2b03b4ccb834471cf09fe594005b28fd68382f5877596c52d0aba2cb67cac3"}, @generic={0x25, 0xe, "d9eeb140fbeb72e3ae1f58ed32fc9737f0e728e75ee23c6b68923ec50fa7069db6c44b"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x4, 0x8d, 0x6}}]}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x250, 0xb2, 0x25, 0x7, 0x40, 0x96}, 0xa6, &(0x7f00000019c0)={0x5, 0xf, 0xa6, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0xae, 0x81, 0x1, 0x100, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "34e85c8f6f181c451c2b7a643255ac3e"}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x6, 0x0, 0xfffc, [0xffff0f, 0x3fc0, 0x3fc0, 0xffc000]}, @generic={0x2e, 0x10, 0xb, "5cedcff9a96681ac319d477488d63e7157d0ef22976b3e7ab043ab2e57f5330448a63953b7a4b6161356d2"}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x10000, 0x780f, 0x8, [0xc0, 0xc000, 0xff3f3f, 0xc0, 0x6f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "657292ed87d0b33653ec67e4f197bec1"}]}, 0x5, [{0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0xca3e3a43493e1508}}, {0x21, &(0x7f0000001ac0)=@string={0x21, 0x3, "91934ed6cfe4cbd1be2cad26b5a8b95f817f8d0e1af255325cc324dceec7d7"}}, {0xf4, &(0x7f0000001b00)=@string={0xf4, 0x3, "4527be8a1cb45db394ce43ce3cf66e86a1f3718f99958960e49d3186cce9249c78cf00abffa08409f98f6984121f9b6287f681445f6600313b6196cbf74d06a98a9f4740cb3240c63efcf54b1af16b301045d49068617fdd042fe04847595ba9ffbc7cee5543578a4b176f7ed00f5d0f979339c6a1592282e36d4131c911915495875740e44f81253768fcf1d8071ad8224dbb70ece71a9f6fdfb71dba17c5959cbba9f69631ab4c60b70863c4dde2092d6194b70576c10278abff5bd9a641d9e5095fb98e43fd09e21d17f1d938402de9ff9f6ed799fb9d6187a2445ccfc5bcd0bbc6aaf7f9099c2f92b26124fbde1a43ab"}}, {0x6c, &(0x7f0000001c00)=@string={0x6c, 0x3, "48e9c11f966279087fb005073d085caf7fd5b377150b4b6565324c843ce8598cb47b4273e708a667d1d781340efdaf73451952d25170bda5dfd9914c74cedcb9b8f1551fd99c2f64b78d015ab4990ca4b20b9cd6149d7857808bfca0d123fce81816db708ee0fb8cf653"}}, {0x4, &(0x7f0000001c80)=@lang_id={0x4, 0x3, 0x414}}]}) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, 0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="00030200000002038a3d89d6003c997e6d0f608586fcae1b23d7ecd0dd6c9d5df168646b7cb6d10786c1e6fbe344d248639e56c03cf4a2b058efe978c987b85761e63fe5ecf8e8a61bd856152deb403836d6058a2e1f66c7a184e37a7f77efe3e63d401ad22e2f36506c398333669cddebff76"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f00000101c0)={0x0, 0x2, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x8001, 0x0, 0x1000000, "64f778ddcf2907e63600"}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0x50000, 0x201000, 0x8}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a310000fab9500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000012c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r9, 0x8, 0x1000, &(0x7f0000001d40)=""/4096) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r10, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x80, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x50) sendmsg$inet_sctp(r7, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x0, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffd, 0xff}}], 0x38, 0xc054}, 0x2c0408d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000000094000100fffff7ff95"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.230576768s ago: executing program 3 (id=2307): ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 1.128560572s ago: executing program 1 (id=2308): r0 = openat$nvram(0xffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82d7f) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0x6f2d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0xfffffffd, 0x0, 0xc, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff8, 0xfff, 0x0, 0x1, 0x3f8, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x6], [0x2, 0x20000, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40, 0x5, 0xe, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, 0x55], [0x0, 0x0, 0x0, 0x5d71, 0x0, 0xbd8f, 0x1, 0x4, 0x0, 0xfffffffd, 0xff, 0x9, 0x4, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x2, 0x0, 0x10001, 0x810, 0x6, 0x0, 0x0, 0x800000, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xcc61, 0x6, 0xfffffffc, 0x1, 0x1d, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0xfffffffe, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x0, 0x7ce1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x80000000, 0x4, 0x91a, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x2001, 0xfffffffd, 0x80, 0xffffffff, 0xffffffff, 0x0, 0xae, 0x0, 0xc, 0x400000, 0x2, 0x0, 0x10200000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1]}, 0x45c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0xc) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.05165869s ago: executing program 3 (id=2309): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, 0x0) syz_clone3(&(0x7f0000000240)={0x200a04000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.030266389s ago: executing program 2 (id=2310): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f0102030109021200010000000009"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pread64(r0, &(0x7f0000000700)=""/207, 0xcf, 0x6) 848.717929ms ago: executing program 1 (id=2311): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f000000a4c0)={0x2020}, 0xa5) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 506.469304ms ago: executing program 3 (id=2312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1451c55f850600060000002eb88c0330e4f9bfb82144c7568dc9bfd93c462894f56a907d9cf25879f8d455228fa7b921033d54475d600b28a1dcfc4fb4e0f5afd2b618fa883066ec941a048da1f23041bbbd3d164fa783fde5c402ed2df10e88c941f9c8cdd59503679be3"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 500.779027ms ago: executing program 0 (id=2313): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, r0, 0x0) getpeername$packet(r0, &(0x7f000001c740), &(0x7f000001c780)=0x14) sendmmsg$inet6(r0, 0x0, 0x0, 0x8000) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 391.148357ms ago: executing program 1 (id=2314): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)={0x0}) r4 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000040)={0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000000)={0x0}) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000680)=0x7ffffffc, 0x5e) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000040)=[r6], 0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000300)=[0x0, r5, r6], &(0x7f0000000140), 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f00000001c0)={0x0}) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x20080) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0xc00c0) ioctl$BLKTRACETEARDOWN(r10, 0xc0c0128e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, r11, r12], &(0x7f0000000340)=[0x4, 0x44ebeb6b, 0x3, 0x2, 0x101, 0x40800000, 0x10, 0x976], 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f00000002c0)={&(0x7f0000000280)=[r1, r2, r3, 0x0, r5, r8, r11, r13], 0x1, 0x8, 0x2}) r14 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r14, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x5, 0x2, 0x81, 0xfffff034}, {0x1f, 0x5, 0x0, 0xfffff04c}, {0x2, 0x0, 0x0, 0xffff0001}]}, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r16 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r16, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)='H', 0x1}], 0x1}}], 0x1, 0x200400d1) shutdown(r16, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r16, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="7fb98431", @ANYRES16=r15, @ANYBLOB="0100fdffff000000000003000000140001800e0001006574683a766c616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) 313.373209ms ago: executing program 3 (id=2315): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012810b000100677265741425637a617000001c00028006000f000740000008000700ac141428", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 312.001138ms ago: executing program 0 (id=2316): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000019240)=""/102356, 0x18fd4, 0x200) mmap$binder(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x9) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="000008000100000000003d00000048f800400000000000f78490783fffffffac1414aa440c6700000000040000000300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x4e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000180)=ANY=[@ANYBLOB="bb6233c1eb870180c200000086dd6410f746004a2f0100000000000000000000ffffffffffffff0200000000000000000000000000010401000904000800010086ddef2f6de0080088be000000041c0930000100000000000003080022eb0000000103915300020000"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07001500"], 0x14}}, 0x0) r5 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r5, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac23}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0x4cc59373, 0x0, 0x8001, 0x1, 0x6, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x10000, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x1, 0x2, 0x1, 0xe, 0x8000, 0x1, 0x9d, 0x80, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xffffffff, 0x3, 0x100, 0x5, 0xb], [0xa, 0x9d2, 0x80000001, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x9, 0x8, 0x80000001, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x0, 0x2, 0x2, 0x3, 0xb, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc00, 0x1, 0x4, 0x3ff, 0x3, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0x0, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0xd7a8, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0x9, 0x7, 0x590, 0x10000000, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x6, 0x7, 0x3, 0x3, 0x4, 0xe, 0x8001, 0x1, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x7, 0x2, 0x8000, 0x10, 0x5, 0x3, 0x1, 0x10, 0xb8, 0x6, 0xec5f, 0x8001, 0x7fffffff, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x3, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x6, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x4, 0x9, 0x80000000, 0xffff, 0xb7, 0x3a1, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0x9, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x6, 0x6, 0x6, 0x5, 0x1, 0x0, 0x4, 0x9, 0x6, 0x1, 0x6, 0x2, 0x3, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0x6]}, 0x45c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mkdir(&(0x7f0000000040)='./file0\x00', 0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1f, 0x0, 0x4, 0x8) syz_create_resource$binfmt(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 1 (id=2317): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) clock_gettime(0x5, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4276}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x81, @loopback, 0x9}, r3, 0x7fff}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r2, 0x0, 0x1, 0x4}}, 0x20) kernel console output (not intermixed with test programs): (unregistering): Released all slaves [ 499.801012][ T9748] bond1 (unregistering): Released all slaves [ 499.826688][T12374] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 499.837980][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 499.874025][T12374] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 499.908488][ T8870] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0027/input/input30 [ 499.997794][ T8870] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0027/input/input31 [ 500.038510][ T8870] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0027/input/input32 [ 500.068121][ T8870] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0027/input/input33 [ 500.099249][ T8870] uclogic 0003:256C:006D.0027: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 500.144273][ T8897] usb 1-1: USB disconnect, device number 79 [ 500.153605][ T9748] tipc: Left network mode [ 500.614105][ T8870] usb 3-1: USB disconnect, device number 90 [ 500.728795][T12415] fido_id[12415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 501.040234][ T5634] Bluetooth: hci3: command tx timeout [ 501.602831][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.609243][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.720261][ T8897] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 501.811769][T12456] xt_SECMARK: invalid mode: 2 [ 501.867702][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 501.886467][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.913001][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.929326][T12366] bridge_slave_0: entered allmulticast mode [ 501.937246][ T8897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.950846][T12366] bridge_slave_0: entered promiscuous mode [ 501.960117][ T8897] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 501.997707][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.021769][ T8897] usb 1-1: config 1 interface 0 has no altsetting 0 [ 502.044613][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.067718][T12366] bridge_slave_1: entered allmulticast mode [ 502.085495][ T8897] usb 1-1: string descriptor 0 read error: -22 [ 502.102635][ T8897] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 502.110226][T12366] bridge_slave_1: entered promiscuous mode [ 502.147928][ T8897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.237124][ T8897] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 502.375084][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.435656][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.469939][ T8870] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 502.644732][ T8870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.670539][ T9748] hsr_slave_0: left promiscuous mode [ 502.676887][ T8870] usb 4-1: config 0 has no interfaces? [ 502.684964][ T9748] hsr_slave_1: left promiscuous mode [ 502.689499][ T8870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.690333][ T8870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.725775][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.752675][ T8870] usb 4-1: config 0 descriptor?? [ 502.762843][ T9748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.003254][ T8897] usb 4-1: USB disconnect, device number 66 [ 503.121478][ T5634] Bluetooth: hci3: command tx timeout [ 503.954930][ T8870] usb 1-1: USB disconnect, device number 80 [ 504.177172][T12366] team0: Port device team_slave_0 added [ 504.191178][T12366] team0: Port device team_slave_1 added [ 504.205280][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.216033][T12471] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 504.246146][T12471] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 504.336304][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.359067][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.388730][ T8870] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 504.397449][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.440741][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.464722][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.556632][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.585380][ T8870] usb 1-1: Using ep0 maxpacket: 32 [ 504.604080][ T8870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.643120][ T8870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.716116][ T8870] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 504.749787][ T8870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.818819][ T8870] usb 1-1: config 0 descriptor?? [ 504.868570][T12366] hsr_slave_0: entered promiscuous mode [ 504.933046][T12366] hsr_slave_1: entered promiscuous mode [ 504.984353][T12366] debugfs: 'hsr0' already exists in 'hsr' [ 505.005587][T12366] Cannot create hsr debugfs directory [ 505.200336][ T5634] Bluetooth: hci3: command tx timeout [ 505.308894][ T8870] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 505.640888][ T8896] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 505.781831][T12518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.862110][ T8896] usb 3-1: Using ep0 maxpacket: 32 [ 505.892133][ T8896] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 505.912846][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.943122][ T8896] usb 3-1: config 0 descriptor?? [ 505.965911][ T8896] gspca_main: sunplus-2.14.0 probing 041e:400b [ 506.178599][ T8877] usb 1-1: USB disconnect, device number 81 [ 506.682114][ T8896] gspca_sunplus: reg_w_riv err -110 [ 506.708926][ T8896] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 506.735444][T12366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.787587][ T8896] usb 3-1: USB disconnect, device number 91 [ 506.797674][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.818468][T12366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.881137][T12528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1973'. [ 506.899793][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.918870][T12366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.949308][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.984034][T12366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 507.020761][T12366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.055882][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 507.370477][ T8896] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 507.451515][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.509232][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.559086][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.566334][ T3274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.581709][ T8896] usb 1-1: Using ep0 maxpacket: 8 [ 507.608071][ T8896] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 507.626178][ T8896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.653878][ T8896] usb 1-1: Product: syz [ 507.668961][ T8896] usb 1-1: Manufacturer: syz [ 507.672323][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.680923][ T9748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.703939][ T8896] usb 1-1: SerialNumber: syz [ 507.724494][ T8896] usb 1-1: config 0 descriptor?? [ 507.738351][ T8896] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 507.753541][ T8896] pctv452e: pctv452e_power_ctrl: 1 [ 507.753541][ T8896] [ 507.760365][ T5697] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 507.795918][ T8896] usb 1-1: selecting invalid altsetting 3 [ 507.809062][ T8896] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 507.809062][ T8896] [ 507.830896][T12520] loop2: detected capacity change from 0 to 7 [ 507.883457][ T8896] dvb-usb: bulk message failed: -22 (5/0) [ 507.904217][T12520] Dev loop2: unable to read RDB block 7 [ 507.923097][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 507.946093][ T5697] usb 3-1: not running at top speed; connect to a high speed hub [ 507.955598][ T8896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 507.977936][T12520] loop2: AHDI p1 p2 p3 [ 507.997257][T12520] loop2: partition table partially beyond EOD, truncated [ 508.011293][ T5697] usb 3-1: config 5 has an invalid interface number: 206 but max is 0 [ 508.022663][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.030690][ T5697] usb 3-1: config 5 has no interface number 0 [ 508.061685][ T5697] usb 3-1: config 5 interface 206 has no altsetting 0 [ 508.089236][ T5697] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 508.100280][T12520] loop2: p1 start 1601398130 is beyond EOD, truncated [ 508.113968][T12520] loop2: p2 start 1702059890 is beyond EOD, truncated [ 508.120872][ T8896] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 508.120930][ T8896] usb 1-1: media controller created [ 508.120979][ T8896] dvb-usb: bulk message failed: -22 (8/0) [ 508.121015][ T8896] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 508.140947][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.181253][ T5697] usb 3-1: Product: syz [ 508.186501][T12366] veth0_vlan: entered promiscuous mode [ 508.192797][ T5697] usb 3-1: Manufacturer: syz [ 508.206366][ T5697] usb 3-1: SerialNumber: syz [ 508.225636][ T8896] dvb-usb: MAC address reading failed. [ 508.280740][ T8896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 508.306976][T12366] veth1_vlan: entered promiscuous mode [ 508.428139][ T8896] DVB: Unable to find symbol stb0899_attach() [ 508.439131][ T8896] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 508.472747][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.550399][ T8897] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 508.579344][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.622603][T12366] veth0_macvtap: entered promiscuous mode [ 508.634024][T12553] netlink: 'syz.2.1978': attribute type 5 has an invalid length. [ 508.650402][T12553] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1978'. [ 508.662491][ T8896] rc_core: IR keymap rc-tt-1500 not found [ 508.666270][T12366] veth1_macvtap: entered promiscuous mode [ 508.691460][ T8896] Registered IR keymap rc-empty [ 508.718180][ T8896] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 508.744841][T12553] loop7: detected capacity change from 0 to 16384 [ 508.756149][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.789730][ T8897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.833025][ T8896] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input34 [ 508.855035][ T8897] usb 2-1: config 0 has no interfaces? [ 508.862684][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.890865][ T8897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.914546][ T8896] dvb-usb: schedule remote query interval to 100 msecs. [ 508.941281][ T8897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.951071][ T8896] pctv452e: pctv452e_power_ctrl: 0 [ 508.951071][ T8896] [ 508.974136][ T8896] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 509.002923][ T8897] usb 2-1: config 0 descriptor?? [ 509.028381][ T8896] usb 1-1: USB disconnect, device number 82 [ 509.044130][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.084555][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.146395][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.188607][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.331261][ T8897] usb 2-1: USB disconnect, device number 68 [ 509.452356][ T8896] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 509.731299][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.765754][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.888894][ T3274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.911461][ T3274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.059927][ T8896] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 510.314603][ T8896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 510.372421][ T8896] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 510.429220][ T8896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.492299][ T8896] usb 1-1: config 0 descriptor?? [ 510.533797][T12573] FAULT_INJECTION: forcing a failure. [ 510.533797][T12573] name failslab, interval 1, probability 0, space 0, times 0 [ 510.642492][T12573] CPU: 1 UID: 0 PID: 12573 Comm: syz.1.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.642529][T12573] Tainted: [L]=SOFTLOCKUP [ 510.642538][T12573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.642551][T12573] Call Trace: [ 510.642560][T12573] [ 510.642570][T12573] dump_stack_lvl+0xe8/0x150 [ 510.642605][T12573] should_fail_ex+0x412/0x560 [ 510.642639][T12573] should_failslab+0xa8/0x100 [ 510.642671][T12573] ? skb_clone+0x212/0x3a0 [ 510.642701][T12573] kmem_cache_alloc_noprof+0x87/0x650 [ 510.642738][T12573] skb_clone+0x212/0x3a0 [ 510.642772][T12573] __netlink_deliver_tap+0x404/0x850 [ 510.642815][T12573] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.642845][T12573] netlink_deliver_tap+0x19c/0x1b0 [ 510.642876][T12573] netlink_sendskb+0x68/0x140 [ 510.642905][T12573] nfnetlink_rcv+0x251a/0x27b0 [ 510.642969][T12573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 510.643013][T12573] ? ref_tracker_free+0x693/0x840 [ 510.643074][T12573] ? __netlink_deliver_tap+0x807/0x850 [ 510.643113][T12573] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.643141][T12573] ? netlink_deliver_tap+0x2e/0x1b0 [ 510.643176][T12573] netlink_unicast+0x75c/0x8e0 [ 510.643214][T12573] netlink_sendmsg+0x813/0xb40 [ 510.643254][T12573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.643287][T12573] ? aa_sock_msg_perm+0xf1/0x1b0 [ 510.643318][T12573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.643350][T12573] ____sys_sendmsg+0x972/0x9f0 [ 510.643380][T12573] ? __might_fault+0xaf/0x130 [ 510.643422][T12573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.643468][T12573] ? import_iovec+0x73/0xa0 [ 510.643503][T12573] ___sys_sendmsg+0x2a5/0x360 [ 510.643531][T12573] ? __lock_acquire+0x6b5/0x2cf0 [ 510.643559][T12573] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.643627][T12573] ? __fget_files+0x2a/0x420 [ 510.643658][T12573] ? __fget_files+0x3a0/0x420 [ 510.643699][T12573] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.643732][T12573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.643774][T12573] ? __pfx_ksys_write+0x10/0x10 [ 510.643813][T12573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.643836][T12573] do_syscall_64+0x15f/0xf80 [ 510.643865][T12573] ? trace_irq_disable+0x3b/0x140 [ 510.643897][T12573] ? clear_bhb_loop+0x40/0x90 [ 510.643923][T12573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.643945][T12573] RIP: 0033:0x7f20dd79ce59 [ 510.643964][T12573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.643981][T12573] RSP: 002b:00007f20de6a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.644004][T12573] RAX: ffffffffffffffda RBX: 00007f20dda15fa0 RCX: 00007f20dd79ce59 [ 510.644020][T12573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 510.644034][T12573] RBP: 00007f20de6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 510.644047][T12573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.644060][T12573] R13: 00007f20dda16038 R14: 00007f20dda15fa0 R15: 00007f20ddb3fa48 [ 510.644094][T12573] [ 510.829856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 511.130082][ T8896] (null): keene_cmd_main failed (-110) [ 511.178720][ T8896] video4linux radio48: keene_cmd_main failed (-32) [ 511.187185][ T8896] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 511.506746][ T5697] rtsx_usb 3-1:5.206: probe with driver rtsx_usb failed with error -22 [ 511.543477][ T29] audit: type=1326 audit(1778844803.574:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 511.593755][ T5697] usb 3-1: USB disconnect, device number 92 [ 511.658992][ T29] audit: type=1326 audit(1778844803.614:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 511.709787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 511.758149][ T29] audit: type=1326 audit(1778844803.624:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 511.821627][ T29] audit: type=1326 audit(1778844803.634:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 511.873602][ T29] audit: type=1326 audit(1778844803.634:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12563 comm="syz.0.1980" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 512.229877][ T8895] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 512.390003][ T8895] usb 4-1: Using ep0 maxpacket: 32 [ 512.397575][ T8895] usb 4-1: config 0 has too many interfaces: 193, using maximum allowed: 32 [ 512.426500][ T8895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 193 [ 512.451884][ T8895] usb 4-1: config 0 has no interface number 0 [ 512.470306][ T8895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.504771][ T8895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.535106][ T8895] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 512.562328][ T8895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.589912][ T8875] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 512.605884][ T8895] usb 4-1: config 0 descriptor?? [ 512.761067][ T8875] usb 2-1: Using ep0 maxpacket: 32 [ 512.779892][ T8875] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 512.809801][ T8875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.857913][ T8875] usb 2-1: config 0 descriptor?? [ 512.883983][ T8875] gspca_main: sunplus-2.14.0 probing 041e:400b [ 513.070634][T12586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.105622][T12601] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.127211][T12586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.630288][ T8875] gspca_sunplus: reg_w_riv err -110 [ 513.643828][ T8875] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 513.697906][ T8875] usb 2-1: USB disconnect, device number 69 [ 513.740168][T12590] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 513.759143][T12590] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 513.926269][ T8883] usb 1-1: USB disconnect, device number 83 [ 514.750673][ T8883] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 514.922837][ T8883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.944799][ T8883] usb 2-1: config 0 has no interfaces? [ 514.957365][ T8883] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.999499][ T8883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.034927][ T8883] usb 2-1: config 0 descriptor?? [ 515.310940][ T8883] usb 2-1: USB disconnect, device number 70 [ 515.374642][ T8895] usbhid 4-1:0.1: can't add hid device: -71 [ 515.409436][ T8895] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 515.465178][ T8895] usb 4-1: USB disconnect, device number 67 [ 515.883160][T12638] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 516.009888][ T8893] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 516.172358][ T8893] usb 1-1: Using ep0 maxpacket: 32 [ 516.186058][ T8893] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 516.208392][ T8893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.237200][ T8893] usb 1-1: config 0 descriptor?? [ 516.262505][ T8893] gspca_main: sunplus-2.14.0 probing 041e:400b [ 516.360428][T12648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 516.613931][T12655] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 516.710993][T12655] bond1: entered promiscuous mode [ 516.720796][T12655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.980390][ T8893] gspca_sunplus: reg_w_riv err -110 [ 517.015772][ T8893] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 517.080174][ T8893] usb 1-1: USB disconnect, device number 84 [ 517.111121][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2006'. [ 517.140003][T12663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.348214][T12663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.187285][T12650] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 518.238409][T12650] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 518.921132][ T8895] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 519.095092][ T8895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.132160][ T8895] usb 1-1: config 0 has no interfaces? [ 519.160133][ T8895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 519.183330][ T8895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.233183][ T8895] usb 1-1: config 0 descriptor?? [ 519.481268][ T8895] usb 1-1: USB disconnect, device number 85 [ 519.685893][T12705] netlink: 'syz.1.2015': attribute type 10 has an invalid length. [ 519.758035][T12705] bond0: (slave dummy0): Releasing backup interface [ 519.792226][T12705] dummy0: entered promiscuous mode [ 519.808501][T12705] dummy0: entered allmulticast mode [ 519.839906][T12705] team0: Port device dummy0 added [ 519.855136][T12711] openvswitch: netlink: Multiple metadata blocks provided [ 519.877115][T12677] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 519.903310][T12677] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 520.211726][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2018'. [ 520.324107][ T29] audit: type=1326 audit(1778844812.364:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.353294][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2018'. [ 520.387974][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2018'. [ 520.426563][ T29] audit: type=1326 audit(1778844812.364:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.495839][ T29] audit: type=1326 audit(1778844812.364:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.587146][ T29] audit: type=1326 audit(1778844812.364:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.663176][ T29] audit: type=1326 audit(1778844812.364:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.732305][ T29] audit: type=1326 audit(1778844812.364:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.786314][ T29] audit: type=1326 audit(1778844812.374:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.868766][ T29] audit: type=1326 audit(1778844812.374:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 520.953659][T12730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.007705][ T29] audit: type=1326 audit(1778844812.374:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 521.081886][ T29] audit: type=1326 audit(1778844812.374:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12719 comm="syz.0.2018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7ffc0000 [ 521.290169][T12744] netlink: 'syz.0.2018': attribute type 6 has an invalid length. [ 521.333158][T12744] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2018'. [ 521.369819][ T8883] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 521.532715][ T8883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 521.554947][ T8883] usb 4-1: not running at top speed; connect to a high speed hub [ 521.635272][ T8883] usb 4-1: config 2 has an invalid interface number: 77 but max is 0 [ 521.675905][ T8883] usb 4-1: config 2 has no interface number 0 [ 521.724540][ T8883] usb 4-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=67.12 [ 521.759576][ T8883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.789775][ T8883] usb 4-1: Product: syz [ 521.805915][ T8883] usb 4-1: Manufacturer: syz [ 521.831522][ T8883] usb 4-1: SerialNumber: syz [ 522.040099][T12761] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 522.068343][ T8883] rndis_host 4-1:2.77: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 522.103062][T12761] bond0: (slave dummy0): Releasing backup interface [ 522.134558][ T8883] usb 4-1: USB disconnect, device number 68 [ 522.152793][T12761] team0: Port device dummy0 added [ 522.836317][T12778] syzkaller0: entered promiscuous mode [ 522.906427][T12778] syzkaller0: entered allmulticast mode [ 523.402227][T12766] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 523.438468][T12766] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 525.076818][ T8875] IPVS: starting estimator thread 0... [ 525.182249][T12833] IPVS: using max 27 ests per chain, 64800 per kthread [ 525.479228][T12848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.647990][T12854] FAULT_INJECTION: forcing a failure. [ 525.647990][T12854] name failslab, interval 1, probability 0, space 0, times 0 [ 525.663155][T12854] CPU: 0 UID: 0 PID: 12854 Comm: syz.1.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.663195][T12854] Tainted: [L]=SOFTLOCKUP [ 525.663204][T12854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.663217][T12854] Call Trace: [ 525.663226][T12854] [ 525.663236][T12854] dump_stack_lvl+0xe8/0x150 [ 525.663268][T12854] should_fail_ex+0x412/0x560 [ 525.663302][T12854] should_failslab+0xa8/0x100 [ 525.663337][T12854] __kmalloc_noprof+0xe8/0x760 [ 525.663367][T12854] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.663405][T12854] tomoyo_realpath_from_path+0xe3/0x5d0 [ 525.663437][T12854] ? tomoyo_domain+0xd7/0x130 [ 525.663474][T12854] ? tomoyo_path_number_perm+0x219/0x630 [ 525.663501][T12854] tomoyo_path_number_perm+0x246/0x630 [ 525.663530][T12854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.663553][T12854] ? __lock_acquire+0x6b5/0x2cf0 [ 525.663595][T12854] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 525.663651][T12854] ? __fget_files+0x2a/0x420 [ 525.663688][T12854] ? __fget_files+0x2a/0x420 [ 525.663714][T12854] ? __fget_files+0x3a0/0x420 [ 525.663737][T12854] ? __fget_files+0x2a/0x420 [ 525.663768][T12854] security_file_ioctl+0xc3/0x2a0 [ 525.663794][T12854] __se_sys_ioctl+0x47/0x170 [ 525.663825][T12854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.663850][T12854] do_syscall_64+0x15f/0xf80 [ 525.663880][T12854] ? trace_irq_disable+0x3b/0x140 [ 525.663912][T12854] ? clear_bhb_loop+0x40/0x90 [ 525.663936][T12854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.663958][T12854] RIP: 0033:0x7f20dd79ce59 [ 525.663977][T12854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.663994][T12854] RSP: 002b:00007f20de6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.664015][T12854] RAX: ffffffffffffffda RBX: 00007f20dda15fa0 RCX: 00007f20dd79ce59 [ 525.664030][T12854] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 525.664044][T12854] RBP: 00007f20de6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 525.664057][T12854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.664073][T12854] R13: 00007f20dda16038 R14: 00007f20dda15fa0 R15: 00007f20ddb3fa48 [ 525.664112][T12854] [ 525.891437][T12854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 527.199986][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.554813][T12881] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2057'. [ 527.793838][T12866] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 527.803053][T12866] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 528.523963][T12892] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 529.348713][T12905] netlink: 'syz.0.2063': attribute type 3 has an invalid length. [ 529.426176][T12904] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 529.619993][ T8896] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 529.780076][ T8896] usb 3-1: Using ep0 maxpacket: 16 [ 529.794844][ T8896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.818286][ T8896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.846369][ T8896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 529.864000][ T8896] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 529.875395][ T8896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.888133][ T8896] usb 3-1: config 0 descriptor?? [ 530.295364][T12919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.343960][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.375590][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.401205][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.431801][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.454442][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.480475][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.501396][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.533934][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.576164][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.619471][ T8896] apple 0003:05AC:027D.0029: unknown main item tag 0x0 [ 530.671738][ T8896] apple 0003:05AC:027D.0029: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 530.717317][ T8896] usb 3-1: USB disconnect, device number 93 [ 530.940881][T12924] fido_id[12924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 531.149797][ T8883] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 531.309796][ T8883] usb 4-1: Using ep0 maxpacket: 8 [ 531.328788][ T8883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.376346][ T8883] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 531.406544][ T8883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.446549][ T8883] usb 4-1: config 0 descriptor?? [ 531.555879][T12925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2067'. [ 531.606100][T12925] loop2: detected capacity change from 0 to 7 [ 531.640797][T12925] Dev loop2: unable to read RDB block 7 [ 531.646658][T12925] loop2: AHDI p1 p2 p3 [ 531.682528][T12925] loop2: partition table partially beyond EOD, truncated [ 531.705003][T12925] loop2: p1 start 1601398130 is beyond EOD, truncated [ 531.714849][T12925] loop2: p2 start 1702059890 is beyond EOD, truncated [ 531.744201][ T8883] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 531.970686][ T8883] usb 4-1: USB disconnect, device number 69 [ 532.886969][T12955] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 532.919339][T12954] syz.0.2075: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.936167][T12944] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 532.950670][T12944] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 532.971167][T12954] CPU: 0 UID: 0 PID: 12954 Comm: syz.0.2075 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.971193][T12954] Tainted: [L]=SOFTLOCKUP [ 532.971199][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.971209][T12954] Call Trace: [ 532.971216][T12954] [ 532.971223][T12954] dump_stack_lvl+0xe8/0x150 [ 532.971246][T12954] warn_alloc+0x249/0x340 [ 532.971274][T12954] ? __pfx_warn_alloc+0x10/0x10 [ 532.971307][T12954] ? __mutex_trylock_common+0x158/0x260 [ 532.971331][T12954] __vmalloc_node_range_noprof+0x132/0x1750 [ 532.971355][T12954] ? rcu_is_watching+0x15/0xb0 [ 532.971403][T12954] ? trace_contention_end+0x3d/0x140 [ 532.971433][T12954] ? __mutex_lock+0x319/0x1550 [ 532.971464][T12954] ? tomoyo_path_number_perm+0x219/0x630 [ 532.971483][T12954] ? tomoyo_path_number_perm+0x219/0x630 [ 532.971499][T12954] ? dvb_dvr_do_ioctl+0x76/0x220 [ 532.971524][T12954] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 532.971544][T12954] ? do_vfs_ioctl+0x1166/0x1530 [ 532.971574][T12954] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 532.971597][T12954] vmalloc_noprof+0xb2/0xe0 [ 532.971617][T12954] ? dvb_dvr_do_ioctl+0x12b/0x220 [ 532.971640][T12954] dvb_dvr_do_ioctl+0x12b/0x220 [ 532.971668][T12954] dvb_usercopy+0x199/0x2e0 [ 532.971687][T12954] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 532.971709][T12954] ? __pfx_dvb_usercopy+0x10/0x10 [ 532.971737][T12954] ? __fget_files+0x3a0/0x420 [ 532.971754][T12954] ? __fget_files+0x2a/0x420 [ 532.971774][T12954] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 532.971796][T12954] dvb_dvr_ioctl+0x29/0x40 [ 532.971818][T12954] __se_sys_ioctl+0xfc/0x170 [ 532.971840][T12954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.971857][T12954] do_syscall_64+0x15f/0xf80 [ 532.971879][T12954] ? trace_irq_disable+0x3b/0x140 [ 532.971903][T12954] ? clear_bhb_loop+0x40/0x90 [ 532.971922][T12954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.971940][T12954] RIP: 0033:0x7f29c179ce59 [ 532.971955][T12954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.971969][T12954] RSP: 002b:00007f29c26b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.971986][T12954] RAX: ffffffffffffffda RBX: 00007f29c1a16090 RCX: 00007f29c179ce59 [ 532.971997][T12954] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000007 [ 532.972007][T12954] RBP: 00007f29c1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 532.972017][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.972026][T12954] R13: 00007f29c1a16128 R14: 00007f29c1a16090 R15: 00007f29c1b3fa48 [ 532.972056][T12954] [ 532.972095][T12954] Mem-Info: [ 533.282800][T12954] active_anon:30156 inactive_anon:0 isolated_anon:0 [ 533.282800][T12954] active_file:15446 inactive_file:40213 isolated_file:0 [ 533.282800][T12954] unevictable:2816 dirty:338 writeback:0 [ 533.282800][T12954] slab_reclaimable:6746 slab_unreclaimable:103640 [ 533.282800][T12954] mapped:32277 shmem:24472 pagetables:1631 [ 533.282800][T12954] sec_pagetables:0 bounce:0 [ 533.282800][T12954] kernel_misc_reclaimable:0 [ 533.282800][T12954] free:1268835 free_pcp:21690 free_cma:0 [ 533.417187][T12954] Node 0 active_anon:116624kB inactive_anon:0kB active_file:61768kB inactive_file:160656kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:129808kB dirty:1348kB writeback:0kB shmem:92452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13632kB pagetables:6268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.522011][T12954] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 533.583710][T12954] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 533.661276][T12954] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 533.696840][T12954] Node 0 DMA32 free:1173504kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116524kB inactive_anon:0kB active_file:61768kB inactive_file:160656kB unevictable:9728kB writepending:1348kB zspages:0kB present:3129332kB managed:2552592kB mlocked:8192kB bounce:0kB free_pcp:29728kB local_pcp:21044kB free_cma:0kB [ 533.786173][T12954] lowmem_reserve[]: 0 0 0 0 0 [ 533.806483][T12954] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 533.911345][T12954] lowmem_reserve[]: 0 0 0 0 0 [ 533.940571][T12954] Node 1 Normal free:3885712kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:61984kB local_pcp:29320kB free_cma:0kB [ 534.190006][T12954] lowmem_reserve[]: 0 0 0 0 0 [ 534.250758][T12954] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15328kB [ 534.341442][T12954] Node 0 DMA32: 3859*4kB (UE) 3479*8kB (UME) 2052*16kB (UME) 712*32kB (UME) 903*64kB (UME) 827*128kB (UME) 610*256kB (UME) 426*512kB (UME) 255*1024kB (UME) 132*2048kB (U) 1*4096kB (U) = 1172356kB [ 534.433916][T12954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 534.460806][T12954] Node 1 Normal: 24*4kB (UM) 26*8kB (UM) 12*16kB (UM) 27*32kB (UM) 27*64kB (UM) 17*128kB (UM) 12*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 942*4096kB (UM) = 3885712kB [ 534.536908][T12954] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.593713][T12954] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 534.666415][T12954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.719069][T12980] netlink: 'syz.5.2087': attribute type 1 has an invalid length. [ 534.750625][T12954] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 534.779901][T12954] 81472 total pagecache pages [ 534.790094][T12954] 0 pages in swap cache [ 534.802272][T12954] Free swap = 124996kB [ 534.813674][T12954] Total swap = 124996kB [ 534.823240][T12954] 2097051 pages RAM [ 534.832952][T12954] 0 pages HighMem/MovableOnly [ 534.846644][T12954] 427121 pages reserved [ 534.851179][T12954] 0 pages cma reserved [ 535.016910][T12992] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 535.055129][T12987] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 535.072589][T12992] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2090'. [ 535.093346][T12987] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 535.139874][ T8896] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.289991][ T8896] usb 6-1: Using ep0 maxpacket: 8 [ 535.310020][ T8896] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 535.336186][ T8896] usb 6-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice= 0.40 [ 535.354833][ T8896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.380745][ T8896] usb 6-1: Product: syz [ 535.390885][ T8896] usb 6-1: Manufacturer: á ‰ [ 535.404303][ T8896] usb 6-1: SerialNumber: syz [ 535.744034][T12980] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 535.788298][T12987] bond1: (slave gretap1): making interface the new active one [ 535.834833][T12987] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 535.957680][ T8896] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 536.093660][ T8896] usb 6-1: USB disconnect, device number 2 [ 536.167910][ T5883] udevd[5883]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 536.385784][T12990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2089'. [ 536.498768][T12990] loop2: detected capacity change from 0 to 7 [ 536.609480][T13019] qrtr: Invalid version 204 [ 536.618326][T12990] Dev loop2: unable to read RDB block 7 [ 536.631366][T12990] loop2: AHDI p1 p2 p3 [ 536.650622][T12990] loop2: partition table partially beyond EOD, truncated [ 536.673805][T12990] loop2: p1 start 1601398130 is beyond EOD, truncated [ 536.673856][T12990] loop2: p2 start 1702059890 is beyond EOD, truncated [ 536.815697][T13022] batadv0: entered promiscuous mode [ 536.848002][T13022] macsec1: entered promiscuous mode [ 536.850573][T13022] macsec1: entered allmulticast mode [ 536.850592][T13022] batadv0: entered allmulticast mode [ 536.861295][T13022] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 536.926686][T13022] batadv0: left allmulticast mode [ 536.926916][T13022] batadv0: left promiscuous mode [ 537.651996][ T8875] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 537.839869][ T8875] usb 2-1: Using ep0 maxpacket: 8 [ 537.880877][ T8875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 537.921270][ T8875] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 537.961273][ T8875] usb 2-1: config 0 has no interface number 0 [ 537.989327][ T8875] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 538.056089][ T8875] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 538.123948][ T8875] usb 2-1: config 0 interface 88 has no altsetting 0 [ 538.164778][ T8875] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 538.187286][ T8875] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 538.207760][ T8875] usb 2-1: Product: syz [ 538.217153][ T8875] usb 2-1: Manufacturer: syz [ 538.227761][ T8875] usb 2-1: SerialNumber: syz [ 538.245348][ T8875] usb 2-1: config 0 descriptor?? [ 538.389841][ T8895] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 538.413265][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 538.413280][ T29] audit: type=1326 audit(1778844830.454:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.3.2106" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4bd19ce59 code=0x0 [ 538.539782][ T8895] usb 3-1: device descriptor read/64, error -71 [ 538.829784][ T8895] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 539.000514][ T8895] usb 3-1: device descriptor read/64, error -71 [ 539.134206][ T8895] usb usb3-port1: attempt power cycle [ 539.249512][T13050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 539.550226][ T8895] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 539.590693][ T8895] usb 3-1: device descriptor read/8, error -71 [ 539.820914][ T8893] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 539.851156][ T8895] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 539.883831][ T8895] usb 3-1: device descriptor read/8, error -71 [ 539.980093][ T8897] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 539.991636][ T8893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 539.999625][ T8893] usb 4-1: too many configurations: 12, using maximum allowed: 8 [ 540.008452][ T8895] usb usb3-port1: unable to enumerate USB device [ 540.019825][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.030677][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.045376][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.056641][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.068685][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.080010][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.091290][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.101972][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.115525][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.132518][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.153290][ T8897] usb 1-1: Using ep0 maxpacket: 16 [ 540.163099][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.181027][ T8897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.200684][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.212778][ T8897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.224009][ T8897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.237284][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.253618][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.265088][ T8897] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 540.279010][ T8897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.288684][ T8893] usb 4-1: config 208 has an invalid descriptor of length 119, skipping remainder of the config [ 540.302347][ T8893] usb 4-1: config 208 has 0 interfaces, different from the descriptor's value: 4 [ 540.314920][ T8897] usb 1-1: config 0 descriptor?? [ 540.342104][ T8893] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 0.e8 [ 540.358184][ T8893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.367762][ T8893] usb 4-1: Product: syz [ 540.375108][ T8893] usb 4-1: Manufacturer: syz [ 540.385512][ T8893] usb 4-1: SerialNumber: syz [ 540.486953][ T8875] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input35 [ 540.593260][ T8875] usb 2-1: USB disconnect, device number 71 [ 540.656426][ T8893] usb 4-1: USB disconnect, device number 70 [ 540.739608][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 541.998599][T13085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2115'. [ 542.240311][ T8895] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 542.421920][ T8895] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 542.449236][ T8895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 542.472332][ T5630] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 542.498523][ T8895] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 542.535978][ T8895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 542.546849][ T8895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.557914][T13080] loop2: detected capacity change from 0 to 7 [ 542.578371][ T8895] usb 3-1: Product: syz [ 542.590150][ T8895] usb 3-1: Manufacturer: syz [ 542.601638][ T8895] usb 3-1: SerialNumber: syz [ 542.635672][ T8895] usb 3-1: config 0 descriptor?? [ 542.652800][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 542.670490][ T5630] usb 4-1: not running at top speed; connect to a high speed hub [ 542.671450][T13093] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.698423][T13080] Dev loop2: unable to read RDB block 7 [ 542.722655][T13080] loop2: AHDI p1 p2 p3 [ 542.743571][T13080] loop2: partition table partially beyond EOD, truncated [ 542.760625][ T5630] usb 4-1: no configurations [ 542.781604][ T5630] usb 4-1: can't read configurations, error -22 [ 542.808136][T13080] loop2: p1 start 1601398130 is beyond EOD, truncated [ 542.831047][T13080] loop2: p2 start 1702059890 is beyond EOD, truncated [ 542.912341][T13087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.927474][ T5630] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 542.929571][ T8897] usbhid 1-1:0.0: can't add hid device: -71 [ 543.003706][ T8897] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 543.031736][ T8897] usb 1-1: USB disconnect, device number 86 [ 543.112425][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.114788][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'. [ 543.154501][ T29] audit: type=1326 audit(1778844835.184:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.214951][ T5630] usb 4-1: not running at top speed; connect to a high speed hub [ 543.230890][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2124'. [ 543.252145][ T5630] usb 4-1: no configurations [ 543.263840][ T5630] usb 4-1: can't read configurations, error -22 [ 543.274998][ T29] audit: type=1326 audit(1778844835.184:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.306021][ T5630] usb usb4-port1: attempt power cycle [ 543.382079][ T29] audit: type=1326 audit(1778844835.184:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.512980][ T29] audit: type=1326 audit(1778844835.184:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e8935d68e code=0x7ffc0000 [ 543.601833][ T29] audit: type=1326 audit(1778844835.184:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.678583][ T29] audit: type=1326 audit(1778844835.194:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.703888][ T5630] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 543.743313][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.756705][ T5630] usb 4-1: not running at top speed; connect to a high speed hub [ 543.779802][ T29] audit: type=1326 audit(1778844835.194:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.808022][ T5630] usb 4-1: no configurations [ 543.818171][ T5630] usb 4-1: can't read configurations, error -22 [ 543.868348][ T29] audit: type=1326 audit(1778844835.194:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.2.2120" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8939ce59 code=0x7ffc0000 [ 543.946129][T13111] netlink: 'syz.0.2128': attribute type 10 has an invalid length. [ 543.955798][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2128'. [ 543.966071][T13111] team0: entered promiscuous mode [ 543.971311][ T5630] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 543.981427][T13111] team_slave_0: entered promiscuous mode [ 543.987435][T13111] team_slave_1: entered promiscuous mode [ 543.994893][ T5630] usb 4-1: unable to get BOS descriptor or descriptor too short [ 543.994896][T13111] dummy0: entered promiscuous mode [ 543.995902][T13111] team0: entered allmulticast mode [ 544.016714][T13111] team_slave_0: entered allmulticast mode [ 544.024020][T13111] team_slave_1: entered allmulticast mode [ 544.031340][T13111] dummy0: entered allmulticast mode [ 544.033169][ T5630] usb 4-1: not running at top speed; connect to a high speed hub [ 544.043708][T13111] bridge0: port 3(team0) entered blocking state [ 544.059204][T13111] bridge0: port 3(team0) entered disabled state [ 544.066791][ T5630] usb 4-1: no configurations [ 544.072337][ T8895] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 544.087000][ T5630] usb 4-1: can't read configurations, error -22 [ 544.096429][T13111] bridge0: port 3(team0) entered blocking state [ 544.103069][T13111] bridge0: port 3(team0) entered forwarding state [ 544.118403][ T5630] usb usb4-port1: unable to enumerate USB device [ 544.210205][ T8895] usb 2-1: device descriptor read/64, error -71 [ 544.329188][ T29] audit: type=1326 audit(1778844836.364:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.0.2129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29c179ce59 code=0x7fc00000 [ 544.376016][ T29] audit: type=1326 audit(1778844836.394:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.0.2129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f29c179ce59 code=0x7fc00000 [ 544.431508][ T29] audit: type=1326 audit(1778844836.454:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.0.2129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29c1796bd7 code=0x7fc00000 [ 544.470201][ T8895] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 544.490213][ T29] audit: type=1326 audit(1778844836.454:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.0.2129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29c173e1d9 code=0x7fc00000 [ 544.533472][ T29] audit: type=1326 audit(1778844836.454:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13112 comm="syz.0.2129" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f29c173e29d code=0x7fc00000 [ 544.629798][ T8895] usb 2-1: device descriptor read/64, error -71 [ 544.742595][ T8895] usb usb2-port1: attempt power cycle [ 544.829028][ T8883] usb 3-1: USB disconnect, device number 98 [ 544.902698][ T5630] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 545.069951][ T5630] usb 6-1: Using ep0 maxpacket: 8 [ 545.084650][ T5630] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 545.103094][ T5630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.111771][ T5630] usb 6-1: Product: syz [ 545.116038][ T5630] usb 6-1: Manufacturer: syz [ 545.120341][ T8895] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 545.122537][ T5630] usb 6-1: SerialNumber: syz [ 545.136027][T13122] FAULT_INJECTION: forcing a failure. [ 545.136027][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.152776][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.0.2133 Tainted: G L syzkaller #0 PREEMPT(full) [ 545.152810][T13122] Tainted: [L]=SOFTLOCKUP [ 545.152818][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.152832][T13122] Call Trace: [ 545.152841][T13122] [ 545.152850][T13122] dump_stack_lvl+0xe8/0x150 [ 545.152880][T13122] should_fail_ex+0x412/0x560 [ 545.152912][T13122] _copy_from_user+0x2d/0xb0 [ 545.152944][T13122] __copy_msghdr+0x3c5/0x5b0 [ 545.152978][T13122] ___sys_sendmsg+0x213/0x360 [ 545.153006][T13122] ? __lock_acquire+0x6b5/0x2cf0 [ 545.153033][T13122] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.153098][T13122] ? __fget_files+0x2a/0x420 [ 545.153128][T13122] ? __fget_files+0x3a0/0x420 [ 545.153164][T13122] __x64_sys_sendmsg+0x1bd/0x2a0 [ 545.153196][T13122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.153235][T13122] ? __pfx_ksys_write+0x10/0x10 [ 545.153274][T13122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.153297][T13122] do_syscall_64+0x15f/0xf80 [ 545.153326][T13122] ? trace_irq_disable+0x3b/0x140 [ 545.153356][T13122] ? clear_bhb_loop+0x40/0x90 [ 545.153382][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.153403][T13122] RIP: 0033:0x7f29c179ce59 [ 545.153423][T13122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.153441][T13122] RSP: 002b:00007f29c26da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.153463][T13122] RAX: ffffffffffffffda RBX: 00007f29c1a15fa0 RCX: 00007f29c179ce59 [ 545.153478][T13122] RDX: 00000000000000c4 RSI: 0000200000000080 RDI: 0000000000000004 [ 545.153490][T13122] RBP: 00007f29c26da090 R08: 0000000000000000 R09: 0000000000000000 [ 545.153503][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.153515][T13122] R13: 00007f29c1a16038 R14: 00007f29c1a15fa0 R15: 00007f29c1b3fa48 [ 545.153547][T13122] [ 545.155220][ T5630] usb 6-1: config 0 descriptor?? [ 545.184537][ T8895] usb 2-1: device descriptor read/8, error -71 [ 545.286903][ T8883] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 545.416813][ T5630] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 545.520728][ T8883] usb 3-1: Using ep0 maxpacket: 16 [ 545.528301][ T8883] usb 3-1: config 3 has an invalid interface number: 231 but max is 0 [ 545.537787][ T8883] usb 3-1: config 3 has no interface number 0 [ 545.546606][ T8883] usb 3-1: config 3 interface 231 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 545.581347][ T8883] usb 3-1: config 3 interface 231 has no altsetting 0 [ 545.604964][ T8883] usb 3-1: New USB device found, idVendor=0bfd, idProduct=000b, bcdDevice=a9.3d [ 545.622959][ T8883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.643870][ T8883] usb 3-1: Product: syz [ 545.648661][ T8883] usb 3-1: Manufacturer: syz [ 545.654640][ T8883] usb 3-1: SerialNumber: syz [ 545.699863][ T8895] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 545.730648][ T8895] usb 2-1: device descriptor read/8, error -71 [ 545.850541][ T8895] usb usb2-port1: unable to enumerate USB device [ 546.029864][ T8896] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 546.179834][ T8896] usb 1-1: Using ep0 maxpacket: 8 [ 546.187341][ T8896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.201276][ T8896] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 546.211724][ T8896] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 546.220847][ T8896] usb 1-1: Product: syz [ 546.225299][ T8896] usb 1-1: Manufacturer: syz [ 546.233752][ T8896] usb 1-1: SerialNumber: syz [ 546.248133][ T8896] usb 1-1: config 0 descriptor?? [ 546.260634][ T8896] imon_raw 1-1:0.0: IR endpoint missing [ 546.441580][ T5630] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 546.468077][ T5630] usb 6-1: USB disconnect, device number 3 [ 546.472462][ T8896] usb 1-1: USB disconnect, device number 87 [ 546.679031][T13139] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 547.157793][T13145] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 547.944210][T13151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2140'. [ 547.960431][T13151] loop2: detected capacity change from 0 to 7 [ 547.970695][T13151] Dev loop2: unable to read RDB block 7 [ 547.981388][T13151] loop2: AHDI p1 p2 p3 [ 547.987177][T13151] loop2: partition table partially beyond EOD, truncated [ 547.997727][T13151] loop2: p1 start 1601398130 is beyond EOD, truncated [ 548.008196][T13151] loop2: p2 start 1702059890 is beyond EOD, truncated [ 548.066432][ T8883] kvaser_usb 3-1:3.231: error -ENODEV: Cannot get usb endpoint(s) [ 548.107424][ T8883] usb 3-1: USB disconnect, device number 99 [ 548.819915][ T8895] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 548.991014][ T8895] usb 6-1: Using ep0 maxpacket: 8 [ 549.009895][ T8895] usb 6-1: no configurations [ 549.026624][ T8895] usb 6-1: can't read configurations, error -22 [ 549.180052][ T8895] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 549.316590][T13164] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 549.328629][T13164] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 549.339868][ T8895] usb 6-1: Using ep0 maxpacket: 8 [ 549.358351][ T8895] usb 6-1: no configurations [ 549.365665][ T8895] usb 6-1: can't read configurations, error -22 [ 549.379382][ T8895] usb usb6-port1: attempt power cycle [ 549.669948][ T8883] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 549.689921][ T5630] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 549.740108][ T8895] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 549.771451][ T8895] usb 6-1: Using ep0 maxpacket: 8 [ 549.781016][ T8895] usb 6-1: no configurations [ 549.785905][ T8895] usb 6-1: can't read configurations, error -22 [ 549.841365][ T8883] usb 2-1: Using ep0 maxpacket: 8 [ 549.849528][ T8883] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 549.860156][ T5630] usb 1-1: Using ep0 maxpacket: 16 [ 549.866548][ T8883] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 549.876220][ T8883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.884782][ T8883] usb 2-1: Product: syz [ 549.889220][ T8883] usb 2-1: Manufacturer: syz [ 549.894142][ T5630] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 549.902568][ T5630] usb 1-1: config 0 has no interface number 0 [ 549.908748][ T8883] usb 2-1: SerialNumber: syz [ 549.915048][ T5630] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 549.927611][ T8883] usb 2-1: config 0 descriptor?? [ 549.932165][ T8895] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 549.941686][ T5630] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 549.958576][ T8883] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 549.961552][ T8895] usb 6-1: Using ep0 maxpacket: 8 [ 549.973816][ T8895] usb 6-1: no configurations [ 549.983739][ T8895] usb 6-1: can't read configurations, error -22 [ 549.991565][ T8895] usb usb6-port1: unable to enumerate USB device [ 549.994163][ T8883] usb 2-1: setting power ON [ 550.008465][ T8883] dvb-usb: bulk message failed: -22 (2/0) [ 550.015963][ T5630] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 550.025881][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.040876][ T5630] usb 1-1: Product: syz [ 550.046229][ T8883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 550.056690][ T5630] usb 1-1: Manufacturer: syz [ 550.063710][ T5630] usb 1-1: SerialNumber: syz [ 550.069183][ T8883] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 550.079757][ T8883] usb 2-1: media controller created [ 550.086212][ T5630] usb 1-1: config 0 descriptor?? [ 550.097838][T13177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 550.116212][T13177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 550.125926][ T8883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.166178][ T8883] usb 2-1: selecting invalid altsetting 6 [ 550.175502][ T8883] usb 2-1: digital interface selection failed (-22) [ 550.192181][ T8883] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 550.203626][ T8883] usb 2-1: setting power OFF [ 550.208932][ T8883] dvb-usb: bulk message failed: -22 (2/0) [ 550.217255][ T8883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 550.228202][ T8883] (NULL device *): no alternate interface [ 550.239640][T13186] dvb-usb: bulk message failed: -22 (4/0) [ 550.268223][T13186] cxusb: i2c read failed [ 550.344912][T13177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 550.365963][T13177] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 551.216657][T13188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.224050][T13188] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.238095][T13188] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.613452][ T8895] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 551.782251][ T8895] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.804907][ T8895] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.826816][ T8895] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.837991][ T8895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 551.851869][ T8895] usb 3-1: SerialNumber: syz [ 551.984069][ T5630] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 552.025776][T13197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2158'. [ 552.067560][T13197] loop2: detected capacity change from 0 to 7 [ 552.088841][ T8895] usb 3-1: 0:2 : does not exist [ 552.113046][T13197] Dev loop2: unable to read RDB block 7 [ 552.123335][T13197] loop2: AHDI p1 p2 p3 [ 552.151533][T13197] loop2: partition table partially beyond EOD, truncated [ 552.169476][T13197] loop2: p1 start 1601398130 is beyond EOD, truncated [ 552.224440][T13197] loop2: p2 start 1702059890 is beyond EOD, truncated [ 552.239564][ T8895] usb 3-1: USB disconnect, device number 100 [ 552.350310][T12363] udevd[12363]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.412376][ T5630] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 552.481297][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 552.522226][ T8883] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 552.534257][ T5630] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 552.547683][ T5630] asix 1-1:0.251: probe with driver asix failed with error -5 [ 552.567596][ T8883] usb 2-1: USB disconnect, device number 76 [ 552.582664][ T5630] usb 1-1: USB disconnect, device number 88 [ 552.921212][T13220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2166'. [ 552.962402][T13220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'. [ 553.519937][ T5630] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 553.729969][ T8895] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 553.774433][ T5630] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 553.826497][ T5630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.871280][ T5630] usb 1-1: Product: syz [ 553.918993][ T5630] usb 1-1: Manufacturer: syz [ 553.934031][ T8895] usb 3-1: config index 0 descriptor too short (expected 31148, got 31) [ 553.969300][ T8895] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.994530][ T5630] usb 1-1: SerialNumber: syz [ 554.003076][ T8895] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 554.017383][ T5630] usb 1-1: config 0 descriptor?? [ 554.027495][ T8895] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 554.045911][ T8895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.054741][ T8895] usb 3-1: Product: syz [ 554.063205][ T8895] usb 3-1: Manufacturer: syz [ 554.063747][ T5630] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 554.095948][ T8895] usb 3-1: SerialNumber: syz [ 554.121759][ T8895] usb 3-1: config 0 descriptor?? [ 554.130221][ T5630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.142585][ T5630] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 554.154637][ T5630] usb 1-1: media controller created [ 554.176482][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.328189][ T5630] DVB: Unable to find symbol mt352_attach() [ 554.429232][ T5630] DVB: Unable to find symbol nxt6000_attach() [ 554.447748][ T5630] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 554.478528][ T5630] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 554.514305][ T5630] dvb-usb: schedule remote query interval to 1000 msecs. [ 554.528933][ T5630] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 554.553359][ T5630] dvb-usb: bulk message failed: -22 (7/0) [ 554.561927][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 554.576197][ T5630] dvb-usb: bulk message failed: -22 (7/0) [ 554.671337][ T5630] usb 1-1: USB disconnect, device number 89 [ 554.853240][ T5630] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 555.474019][T13279] ALSA: mixer_oss: invalid OSS volume '' [ 555.515982][T13283] syz.0.2179: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 555.549019][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.0.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.549058][T13283] Tainted: [L]=SOFTLOCKUP [ 555.549066][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.549081][T13283] Call Trace: [ 555.549090][T13283] [ 555.549101][T13283] dump_stack_lvl+0xe8/0x150 [ 555.549137][T13283] warn_alloc+0x249/0x340 [ 555.549176][T13283] ? __pfx_warn_alloc+0x10/0x10 [ 555.549229][T13283] __vmalloc_node_range_noprof+0x132/0x1750 [ 555.549262][T13283] ? __mutex_trylock_common+0x158/0x260 [ 555.549293][T13283] ? __pfx___mutex_trylock_common+0x10/0x10 [ 555.549329][T13283] ? trace_contention_end+0x3d/0x140 [ 555.549359][T13283] ? __mutex_lock+0x319/0x1550 [ 555.549401][T13283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 555.549429][T13283] ? tomoyo_path_number_perm+0x219/0x630 [ 555.549456][T13283] ? dvb_demux_do_ioctl+0x320/0x540 [ 555.549488][T13283] ? __pfx___mutex_lock+0x10/0x10 [ 555.549523][T13283] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 555.549554][T13283] vmalloc_noprof+0xb2/0xe0 [ 555.549581][T13283] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 555.549614][T13283] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 555.549649][T13283] dvb_demux_do_ioctl+0x45d/0x540 [ 555.549680][T13283] dvb_usercopy+0x199/0x2e0 [ 555.549706][T13283] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 555.549733][T13283] ? __pfx_dvb_usercopy+0x10/0x10 [ 555.549771][T13283] ? __fget_files+0x3a0/0x420 [ 555.549798][T13283] ? __fget_files+0x2a/0x420 [ 555.549826][T13283] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 555.549854][T13283] dvb_demux_ioctl+0x29/0x40 [ 555.549882][T13283] __se_sys_ioctl+0xfc/0x170 [ 555.549913][T13283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.549937][T13283] do_syscall_64+0x15f/0xf80 [ 555.549978][T13283] ? clear_bhb_loop+0x40/0x90 [ 555.550004][T13283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.550025][T13283] RIP: 0033:0x7f29c179ce59 [ 555.550046][T13283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.550064][T13283] RSP: 002b:00007f29c26da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.550087][T13283] RAX: ffffffffffffffda RBX: 00007f29c1a15fa0 RCX: 00007f29c179ce59 [ 555.550102][T13283] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 555.550121][T13283] RBP: 00007f29c1832d6f R08: 0000000000000000 R09: 0000000000000000 [ 555.550135][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.550147][T13283] R13: 00007f29c1a16038 R14: 00007f29c1a15fa0 R15: 00007f29c1b3fa48 [ 555.550182][T13283] [ 555.823340][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2178'. [ 555.889910][T13283] Mem-Info: [ 555.906283][T13283] active_anon:30702 inactive_anon:0 isolated_anon:0 [ 555.906283][T13283] active_file:15446 inactive_file:40221 isolated_file:0 [ 555.906283][T13283] unevictable:768 dirty:282 writeback:0 [ 555.906283][T13283] slab_reclaimable:6452 slab_unreclaimable:103685 [ 555.906283][T13283] mapped:34856 shmem:25083 pagetables:1618 [ 555.906283][T13283] sec_pagetables:0 bounce:0 [ 555.906283][T13283] kernel_misc_reclaimable:0 [ 555.906283][T13283] free:1269375 free_pcp:23219 free_cma:0 [ 556.057931][ T8895] usb 3-1: USB disconnect, device number 101 [ 556.080637][T13283] Node 0 active_anon:124160kB inactive_anon:0kB active_file:61768kB inactive_file:160688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141848kB dirty:1144kB writeback:0kB shmem:101232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13692kB pagetables:6264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 556.167356][T13289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2180'. [ 556.187840][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 556.207653][T13283] Node 1 active_anon:5744kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5756kB dirty:4kB writeback:0kB shmem:7276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 556.250763][T13268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2175'. [ 556.275919][T13283] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:16kB free_cma:0kB [ 556.321395][T13270] loop2: detected capacity change from 0 to 7 [ 556.346719][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2179'. [ 556.408187][T13283] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 556.440668][T13283] Node 0 DMA32 free:1173864kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116860kB inactive_anon:0kB active_file:61768kB inactive_file:160688kB unevictable:1536kB writepending:1144kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:38452kB local_pcp:22396kB free_cma:0kB [ 556.489355][T13270] Dev loop2: unable to read RDB block 7 [ 556.502398][T13270] loop2: AHDI p1 p2 p3 [ 556.514563][T13283] lowmem_reserve[]: 0 0 0 0 0 [ 556.525432][T13283] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 556.555608][T13270] loop2: partition table partially beyond EOD, truncated [ 556.601204][T13270] loop2: p1 start 1601398130 is beyond EOD, truncated [ 556.614716][T13283] lowmem_reserve[]: 0 0 0 0 0 [ 556.624330][T13283] Node 1 Normal free:3884452kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5744kB inactive_anon:0kB active_file:16kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57488kB local_pcp:28548kB free_cma:0kB [ 556.664030][T13270] loop2: p2 start 1702059890 is beyond EOD, truncated [ 556.673958][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 556.681682][T13283] lowmem_reserve[]: 0 0 0 0 0 [ 556.830014][T13283] Node 0 DMA: 0*4kB 0*8kB 2*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15328kB [ 556.904346][T13283] Node 0 DMA32: 3873*4kB (UME) 3362*8kB (UME) 2253*16kB (UME) 760*32kB (UME) 976*64kB (UME) 850*128kB (UME) 624*256kB (UME) 429*512kB (UME) 250*1024kB (UME) 130*2048kB (UM) 0*4096kB = 1175652kB [ 556.959594][T13283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 557.086905][T13283] Node 1 Normal: 17*4kB (U) 18*8kB (UM) 9*16kB (UM) 20*32kB (UM) 9*64kB (UM) 13*128kB (UM) 9*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 943*4096kB (UM) = 3884452kB [ 557.148825][T13283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.176602][T13283] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 557.203121][T13283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.226588][T13283] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 557.248451][T13283] 77337 total pagecache pages [ 557.253657][T13283] 0 pages in swap cache [ 557.258136][T13283] Free swap = 124996kB [ 557.263961][T13283] Total swap = 124996kB [ 557.269502][T13283] 2097051 pages RAM [ 557.274511][T13283] 0 pages HighMem/MovableOnly [ 557.279488][T13283] 427121 pages reserved [ 557.286736][T13283] 0 pages cma reserved [ 557.431229][ T8895] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 557.625061][ T8895] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 557.647298][ T8895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.696998][ T8895] usb 2-1: Product: syz [ 557.728851][ T8895] usb 2-1: Manufacturer: syz [ 557.771267][ T8895] usb 2-1: SerialNumber: syz [ 557.812312][ T8875] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 557.825416][ T8895] usb 2-1: config 0 descriptor?? [ 557.860926][ T5630] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 557.918977][ T8895] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 558.017182][ T8895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.030134][ T8875] usb 1-1: Using ep0 maxpacket: 32 [ 558.037857][ T8895] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 558.047584][ T8875] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 558.047614][ T8875] usb 1-1: config 0 has no interface number 0 [ 558.069865][ T8895] usb 2-1: media controller created [ 558.076335][ T8875] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 558.092793][ T8875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.105043][ T5630] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 558.122105][ T8875] usb 1-1: Product: syz [ 558.130143][ T5630] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 558.143168][ T8875] usb 1-1: Manufacturer: syz [ 558.158915][ T8875] usb 1-1: SerialNumber: syz [ 558.165037][ T5630] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.196381][ T8875] usb 1-1: config 0 descriptor?? [ 558.205231][ T5630] usb 3-1: config 0 has no interface number 0 [ 558.218066][ T5630] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 558.232910][ T8895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.259785][ T5630] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 558.288201][ T5630] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 558.312183][ T5630] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 558.321589][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.347245][ T5630] usb 3-1: config 0 descriptor?? [ 558.398675][ T5630] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 558.478832][ T8895] DVB: Unable to find symbol mt352_attach() [ 558.543870][ T8895] DVB: Unable to find symbol nxt6000_attach() [ 558.550787][ T8895] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 558.566539][ T8895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 558.593715][ T8896] usb 3-1: USB disconnect, device number 102 [ 558.605474][ T9750] usb 3-1: Failed to submit usb control message: -71 [ 558.617761][ T8895] dvb-usb: schedule remote query interval to 1000 msecs. [ 558.632056][ T9750] usb 3-1: unable to send the bmi data to the device: -71 [ 558.644761][ T8895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 558.658794][ T9750] usb 3-1: unable to get target info from device [ 558.668675][ T8895] dvb-usb: bulk message failed: -22 (7/0) [ 558.675330][ T9750] usb 3-1: could not get target info (-71) [ 558.681687][ T8895] dvb-usb: bulk message failed: -22 (7/0) [ 558.687570][ T9750] usb 3-1: could not probe fw (-71) [ 558.709091][ T8895] usb 2-1: USB disconnect, device number 77 [ 558.921999][ T8895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 559.069692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 559.087791][T13343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2191'. [ 559.104308][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 559.339327][T13345] FAULT_INJECTION: forcing a failure. [ 559.339327][T13345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.377163][T13345] CPU: 1 UID: 0 PID: 13345 Comm: syz.2.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.377189][T13345] Tainted: [L]=SOFTLOCKUP [ 559.377211][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.377224][T13345] Call Trace: [ 559.377233][T13345] [ 559.377243][T13345] dump_stack_lvl+0xe8/0x150 [ 559.377271][T13345] should_fail_ex+0x412/0x560 [ 559.377307][T13345] _copy_to_user+0x31/0xb0 [ 559.377331][T13345] simple_read_from_buffer+0xe1/0x170 [ 559.377368][T13345] proc_fail_nth_read+0x1bb/0x230 [ 559.377400][T13345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.377429][T13345] ? rw_verify_area+0x2a6/0x4d0 [ 559.377461][T13345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 559.377481][T13345] vfs_read+0x20c/0xa70 [ 559.377506][T13345] ? __pfx___mutex_lock+0x10/0x10 [ 559.377550][T13345] ? __pfx_vfs_read+0x10/0x10 [ 559.377580][T13345] ? __fget_files+0x2a/0x420 [ 559.377610][T13345] ? __fget_files+0x3a0/0x420 [ 559.377638][T13345] ? __fget_files+0x2a/0x420 [ 559.377662][T13345] ksys_read+0x150/0x270 [ 559.377705][T13345] ? __pfx_ksys_read+0x10/0x10 [ 559.377747][T13345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.377774][T13345] do_syscall_64+0x15f/0xf80 [ 559.377799][T13345] ? trace_irq_disable+0x3b/0x140 [ 559.377822][T13345] ? clear_bhb_loop+0x40/0x90 [ 559.377859][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.377881][T13345] RIP: 0033:0x7f0e8935d68e [ 559.377900][T13345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 559.377917][T13345] RSP: 002b:00007f0e8a307fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 559.377943][T13345] RAX: ffffffffffffffda RBX: 00007f0e8a3086c0 RCX: 00007f0e8935d68e [ 559.377954][T13345] RDX: 000000000000000f RSI: 00007f0e8a3080a0 RDI: 0000000000000003 [ 559.377964][T13345] RBP: 00007f0e8a308090 R08: 0000000000000000 R09: 0000000000000000 [ 559.377973][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.377982][T13345] R13: 00007f0e89616038 R14: 00007f0e89615fa0 R15: 00007f0e8973fa48 [ 559.378028][T13345] [ 559.682154][T13315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.691463][T13315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.731066][T13349] sch_tbf: burst 25 is lower than device ip6gre0 mtu (32769) ! [ 559.767987][ T8875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 559.780121][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 559.819082][ T8875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 559.871926][ T8875] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 559.907121][ T8875] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 559.940846][ T8875] usb 1-1: USB disconnect, device number 90 [ 560.133497][T13358] loop2: detected capacity change from 0 to 7 [ 560.168376][T13358] Dev loop2: unable to read RDB block 7 [ 560.187514][T13358] loop2: unable to read partition table [ 560.200642][T13358] loop2: partition table beyond EOD, truncated [ 560.221590][T13358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.679419][T13374] syzkaller0: entered promiscuous mode [ 560.698943][T13374] syzkaller0: entered allmulticast mode [ 561.162297][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2201'. [ 561.448714][T13386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2196'. [ 561.610527][ T8896] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 561.774393][T13400] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2203'. [ 561.831867][ T8896] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 561.848230][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2203'. [ 561.882780][ T8896] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 561.928282][ T8896] usb 3-1: config 220 has an invalid descriptor of length 242, skipping remainder of the config [ 561.959166][ T8896] usb 3-1: config 220 has no interface number 2 [ 561.978165][ T8896] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 562.015784][ T8896] usb 3-1: config 220 interface 0 has no altsetting 0 [ 562.039343][ T8896] usb 3-1: config 220 interface 76 has no altsetting 0 [ 562.083604][ T8896] usb 3-1: config 220 interface 1 has no altsetting 0 [ 562.109036][ T8896] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 562.130573][ T8896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.154729][ T8896] usb 3-1: Product: syz [ 562.159368][T13357] loop2: detected capacity change from 0 to 7 [ 562.169306][ T8896] usb 3-1: Manufacturer: syz [ 562.175829][ T8896] usb 3-1: SerialNumber: syz [ 562.198941][T13357] Dev loop2: unable to read RDB block 7 [ 562.205511][T13357] loop2: AHDI p1 p2 p3 [ 562.224886][T13357] loop2: partition table partially beyond EOD, truncated [ 562.229845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 562.247498][T13357] loop2: p1 start 1601398130 is beyond EOD, truncated [ 562.266648][T13357] loop2: p2 start 1702059890 is beyond EOD, truncated [ 562.289181][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 562.300434][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2207'. [ 562.330446][ T5630] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 562.451896][T13415] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2206'. [ 562.513238][ T5630] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 562.537045][ T5630] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 562.576985][ T5630] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 562.609757][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.655441][T13409] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 562.701825][ T5630] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.715835][T13420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.755694][T13420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.007051][ T5630] usb 4-1: USB disconnect, device number 75 [ 563.044792][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.059843][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.131174][ T8895] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 564.314110][ T8895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.339326][ T8895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.377896][ T8895] usb 4-1: config 0 has no interface number 0 [ 564.398256][ T8895] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 564.427949][ T8895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.449586][ T8895] usb 4-1: Product: syz [ 564.454292][ T8895] usb 4-1: Manufacturer: syz [ 564.464010][ T8895] usb 4-1: SerialNumber: syz [ 564.491787][ T8895] usb 4-1: config 0 descriptor?? [ 564.516950][ T8895] cx231xx 4-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 564.536137][ T8896] usb 3-1: selecting invalid altsetting 0 [ 564.560947][ T8895] cx231xx 4-1:0.1: Not found matching IAD interface [ 564.593125][ T8896] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 564.620787][ T8896] uvcvideo 3-1:220.0: No valid video chain found. [ 564.693455][ T8896] usb 3-1: selecting invalid altsetting 0 [ 564.732829][ T8896] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 564.796091][ T8896] usb 3-1: USB disconnect, device number 103 [ 565.213198][ T8896] usb 4-1: USB disconnect, device number 76 [ 565.350064][T13466] __nla_validate_parse: 1 callbacks suppressed [ 565.350086][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 565.386561][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 565.569869][ T8895] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 565.753901][ T8895] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 565.765023][ T8895] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 565.786257][ T8895] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 565.829850][ T8895] usb 3-1: config 150 has no interface number 0 [ 565.849878][ T8895] usb 3-1: config 150 interface 204 has no altsetting 0 [ 565.874922][ T8895] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 565.894993][ T8895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.920117][ T8896] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 565.929793][ T8895] usb 3-1: Product: syz [ 565.942349][ T8895] usb 3-1: Manufacturer: syz [ 565.951739][T13480] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2222'. [ 565.972056][ T8895] usb 3-1: SerialNumber: syz [ 566.080165][ T8896] usb 1-1: Using ep0 maxpacket: 32 [ 566.093589][ T8896] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.123271][ T8896] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 566.158292][ T8896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.181174][ T8896] usb 1-1: Product: syz [ 566.202543][ T8896] usb 1-1: Manufacturer: syz [ 566.226293][ T8896] usb 1-1: SerialNumber: syz [ 566.264551][ T8896] usb 1-1: config 0 descriptor?? [ 566.288715][ T8896] xr_serial 1-1:0.0: failed to claim sibling interface: -16 [ 566.298036][T13483] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2223'. [ 566.311154][ T8896] xr_serial 1-1:0.0: probe with driver xr_serial failed with error -16 [ 566.403358][T13445] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 566.424134][ T8895] xr_serial 3-1:150.204: skipping garbage [ 566.430491][T13445] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 566.451439][ T8895] xr_serial 3-1:150.204: invalid descriptor buffer length [ 566.485908][ T8896] usb 1-1: USB disconnect, device number 91 [ 566.511913][ T8895] usb 3-1: USB disconnect, device number 104 [ 566.654559][T13468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 566.676812][T13468] loop2: detected capacity change from 0 to 7 [ 566.686788][T13468] Dev loop2: unable to read RDB block 7 [ 566.698264][T13468] loop2: AHDI p1 p2 p3 [ 566.705606][T13468] loop2: partition table partially beyond EOD, truncated [ 566.713860][T13468] loop2: p1 start 1601398130 is beyond EOD, truncated [ 566.722431][T13468] loop2: p2 start 1702059890 is beyond EOD, truncated [ 567.226226][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 567.319556][T13493] netlink: 'syz.1.2226': attribute type 4 has an invalid length. [ 567.331390][T13494] netlink: 'syz.0.2225': attribute type 16 has an invalid length. [ 567.349815][T13493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2226'. [ 567.377509][T13494] netlink: 'syz.0.2225': attribute type 17 has an invalid length. [ 567.418396][T13494] gre0: left promiscuous mode [ 567.438140][T13494] gre0: left allmulticast mode [ 567.597555][T13494] bridge0: port 3(team0) entered disabled state [ 567.791114][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.813543][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.096102][T13507] FAULT_INJECTION: forcing a failure. [ 568.096102][T13507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.116412][T13507] CPU: 1 UID: 0 PID: 13507 Comm: syz.2.2230 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.116446][T13507] Tainted: [L]=SOFTLOCKUP [ 568.116456][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 568.116472][T13507] Call Trace: [ 568.116478][T13507] [ 568.116485][T13507] dump_stack_lvl+0xe8/0x150 [ 568.116507][T13507] should_fail_ex+0x412/0x560 [ 568.116531][T13507] _copy_from_user+0x2d/0xb0 [ 568.116555][T13507] ___sys_sendmsg+0x1c6/0x360 [ 568.116576][T13507] ? __lock_acquire+0x6b5/0x2cf0 [ 568.116595][T13507] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.116641][T13507] ? __fget_files+0x2a/0x420 [ 568.116658][T13507] ? __fget_files+0x3a0/0x420 [ 568.116683][T13507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 568.116706][T13507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.116734][T13507] ? __pfx_ksys_write+0x10/0x10 [ 568.116761][T13507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.116777][T13507] do_syscall_64+0x15f/0xf80 [ 568.116798][T13507] ? trace_irq_disable+0x3b/0x140 [ 568.116828][T13507] ? clear_bhb_loop+0x40/0x90 [ 568.116846][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.116861][T13507] RIP: 0033:0x7f0e8939ce59 [ 568.116875][T13507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.116888][T13507] RSP: 002b:00007f0e8a308028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.116904][T13507] RAX: ffffffffffffffda RBX: 00007f0e89615fa0 RCX: 00007f0e8939ce59 [ 568.116915][T13507] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 568.116925][T13507] RBP: 00007f0e8a308090 R08: 0000000000000000 R09: 0000000000000000 [ 568.116934][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.116947][T13507] R13: 00007f0e89616038 R14: 00007f0e89615fa0 R15: 00007f0e8973fa48 [ 568.116970][T13507] [ 568.384358][T13494] veth3: left allmulticast mode [ 568.399487][T13494] geneve2: left promiscuous mode [ 568.405164][T13494] geneve2: left allmulticast mode [ 568.433526][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 568.461144][T13494] bridge2: left promiscuous mode [ 568.466185][T13494] bridge2: left allmulticast mode [ 568.485422][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 568.554251][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.797218][T13516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2234'. [ 569.124590][T13529] netlink: 'syz.5.2238': attribute type 8 has an invalid length. [ 569.209833][ T8875] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 569.374770][ T8875] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 569.411655][ T8875] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 569.459356][ T8875] usb 4-1: config 1 interface 0 has no altsetting 0 [ 569.483496][ T8875] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.40 [ 569.500200][ T8875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.533972][ T8875] usb 4-1: Product: syz [ 569.544977][ T8875] usb 4-1: Manufacturer: syz [ 569.560599][ T8875] usb 4-1: SerialNumber: syz [ 569.601428][T13522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.744670][T13534] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 570.540233][T13551] __nla_validate_parse: 5 callbacks suppressed [ 570.540265][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 570.556317][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2244'. [ 570.572600][T13548] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 571.645308][T13560] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2247'. [ 571.996084][T13567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2245'. [ 572.050252][ T8875] usbhid 4-1:1.0: can't add hid device: -71 [ 572.095180][ T8875] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 572.172690][ T8875] usb 4-1: USB disconnect, device number 77 [ 572.418121][T13561] loop2: detected capacity change from 0 to 7 [ 572.452292][T13561] Dev loop2: unable to read RDB block 7 [ 572.459561][T13561] loop2: AHDI p1 p2 p3 [ 572.466822][T13561] loop2: partition table partially beyond EOD, truncated [ 572.493555][T13561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 572.523906][T13561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 572.530971][ T8875] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 572.679803][ T8883] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 572.689810][ T8875] usb 4-1: Using ep0 maxpacket: 32 [ 572.707913][ T8875] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 572.725239][ T8875] usb 4-1: config 2 has no interface number 0 [ 572.745805][ T8875] usb 4-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 572.785296][ T8875] usb 4-1: config 2 interface 88 has no altsetting 0 [ 572.815447][T13577] FAULT_INJECTION: forcing a failure. [ 572.815447][T13577] name failslab, interval 1, probability 0, space 0, times 0 [ 572.864298][ T8883] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 572.881137][ T8875] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 572.891468][ T8883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.899552][T13577] CPU: 1 UID: 0 PID: 13577 Comm: syz.2.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.899586][T13577] Tainted: [L]=SOFTLOCKUP [ 572.899595][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.899666][T13577] Call Trace: [ 572.899705][T13577] [ 572.899729][T13577] dump_stack_lvl+0xe8/0x150 [ 572.899810][T13577] should_fail_ex+0x412/0x560 [ 572.899890][T13577] should_failslab+0xa8/0x100 [ 572.899978][T13577] __kmalloc_noprof+0xe8/0x760 [ 572.900056][T13577] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 572.900155][T13577] tomoyo_realpath_from_path+0xe3/0x5d0 [ 572.900234][T13577] ? tomoyo_domain+0xd7/0x130 [ 572.900332][T13577] ? tomoyo_path_number_perm+0x219/0x630 [ 572.900410][T13577] tomoyo_path_number_perm+0x246/0x630 [ 572.900496][T13577] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 572.900561][T13577] ? __lock_acquire+0x6b5/0x2cf0 [ 572.900663][T13577] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 572.900804][T13577] ? __fget_files+0x2a/0x420 [ 572.900888][T13577] ? __fget_files+0x2a/0x420 [ 572.900946][T13577] ? __fget_files+0x3a0/0x420 [ 572.901012][T13577] ? __fget_files+0x2a/0x420 [ 572.901103][T13577] security_file_ioctl+0xc3/0x2a0 [ 572.901195][T13577] __se_sys_ioctl+0x47/0x170 [ 572.901283][T13577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.901348][T13577] do_syscall_64+0x15f/0xf80 [ 572.901423][T13577] ? clear_bhb_loop+0x40/0x90 [ 572.901491][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.901554][T13577] RIP: 0033:0x7f0e8939ce59 [ 572.901619][T13577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.901666][T13577] RSP: 002b:00007f0e8a2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.901730][T13577] RAX: ffffffffffffffda RBX: 00007f0e89616180 RCX: 00007f0e8939ce59 [ 572.901766][T13577] RDX: 0000200000000000 RSI: 00000000c4c85513 RDI: 0000000000000010 [ 572.901807][T13577] RBP: 00007f0e8a2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 572.901840][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.901872][T13577] R13: 00007f0e89616218 R14: 00007f0e89616180 R15: 00007f0e8973fa48 [ 572.901960][T13577] [ 572.902465][T13577] ERROR: Out of memory at tomoyo_realpath_from_path. [ 572.915244][ T8875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.147900][ T8883] usb 1-1: Product: syz [ 573.152297][ T8883] usb 1-1: Manufacturer: syz [ 573.159551][ T8883] usb 1-1: SerialNumber: syz [ 573.433143][ T8875] usb 4-1: Product: syz [ 573.479405][ T8875] usb 4-1: Manufacturer: syz [ 573.499987][ T8875] usb 4-1: SerialNumber: syz [ 573.534412][T13570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 573.789060][T13570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 573.940796][ T8870] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 574.099881][ T8870] usb 2-1: Using ep0 maxpacket: 32 [ 574.112201][ T8870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.122302][ T8870] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 574.133336][ T8870] usb 2-1: config 7 has no interface number 0 [ 574.148716][ T8870] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 574.179472][ T8870] usb 2-1: config 7 interface 187 has no altsetting 0 [ 574.204696][ T8870] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 574.215742][ T8870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.235639][ T8870] usb 2-1: Product: syz [ 574.250012][ T8870] usb 2-1: Manufacturer: syz [ 574.257806][ T8870] usb 2-1: SerialNumber: syz [ 574.437545][ T8875] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 574.453587][ T8875] asix 4-1:2.88: probe with driver asix failed with error -71 [ 574.503683][ T8875] usb 4-1: USB disconnect, device number 78 [ 574.504200][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.545713][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.557633][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.574906][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.584939][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.604686][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.617606][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.628990][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.648385][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.699336][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.738794][T13590] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 574.782179][ T8870] usb 2-1: Unknown endpoint type found, address 0x07 [ 574.799339][ T8870] usb 2-1: Unknown endpoint type found, address 0x03 [ 574.812113][ T8870] usb 2-1: Not enough endpoints found in device, aborting! [ 574.953371][ T8895] usb 2-1: USB disconnect, device number 78 [ 574.997984][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 575.009512][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 575.357304][T13600] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 575.425981][ T8883] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 575.440435][ T8883] usb 1-1: 1:1 : invalid channels 0 [ 575.462375][ T8883] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 575.675456][ T8883] usb 1-1: USB disconnect, device number 92 [ 575.980072][T13612] sctp: [Deprecated]: syz.5.2260 (pid 13612) Use of int in max_burst socket option deprecated. [ 575.980072][T13612] Use struct sctp_assoc_value instead [ 576.035742][ T3380] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.052478][ T3380] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.112362][ T3380] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.256184][ T3380] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.622512][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 576.653220][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2266'. [ 577.391549][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2261'. [ 577.393668][T13643] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 577.443521][T13642] loop2: detected capacity change from 0 to 7 [ 577.521558][T13642] Dev loop2: unable to read RDB block 7 [ 577.528080][T13642] loop2: AHDI p1 p2 p3 [ 577.533137][T13642] loop2: partition table partially beyond EOD, truncated [ 577.563959][T13642] loop2: p1 start 1601398130 is beyond EOD, truncated [ 577.578595][T13642] loop2: p2 start 1702059890 is beyond EOD, truncated [ 577.586067][T13645] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2271'. [ 577.674643][T13646] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2271'. [ 577.707390][T13646] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 577.731731][T13645] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2271'. [ 578.282684][T13656] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 579.860519][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 579.871965][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 580.050328][ T8870] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 580.254945][ T8870] usb 2-1: Using ep0 maxpacket: 32 [ 580.302087][ T8870] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 580.346172][ T8870] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 580.381517][ T8870] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 580.427031][ T8870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.448343][ T8870] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.487004][ T8870] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.527579][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2283'. [ 580.537806][ T8870] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 580.566046][ T8870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.593052][T13683] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 580.607232][ T8870] usb 2-1: config 0 descriptor?? [ 580.649446][T13686] bond0: entered promiscuous mode [ 580.663342][T13686] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 580.693707][T13686] dummy0: entered promiscuous mode [ 580.724200][T13686] batadv0: entered promiscuous mode [ 580.737015][T13686] hsr1: entered promiscuous mode [ 580.742896][T13686] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 580.832997][ T8870] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 580.889873][ T8897] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 581.053661][ T8897] usb 6-1: Using ep0 maxpacket: 16 [ 581.064819][ T8897] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 581.086554][ T8897] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 581.096820][ T8897] usb 6-1: config 166 has no interface number 0 [ 581.104755][ T8897] usb 6-1: config 166 has no interface number 1 [ 581.112739][ T8897] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 581.129264][ T8897] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 581.161151][ T8897] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 581.189565][ T8897] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 581.224614][ T8897] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 581.239692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 581.253618][ T8897] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 581.267338][ T8897] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 581.281789][ T8897] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 581.302466][ T8897] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 581.319568][ T8897] usb 6-1: config 166 interface 177 has no altsetting 0 [ 581.328011][ T8897] usb 6-1: config 166 interface 34 has no altsetting 0 [ 581.340756][ T8897] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 581.350454][ T8897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.359033][ T8897] usb 6-1: Product: syz [ 581.365409][ T8897] usb 6-1: Manufacturer: syz [ 581.376623][ T8897] usb 6-1: SerialNumber: syz [ 581.638650][ T8897] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 581.779929][ T8870] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 581.849326][ T8897] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 581.942575][ T8870] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 581.954276][ T8870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 581.966067][ T8870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 581.980060][ T8870] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 581.989872][ T8870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.004926][ T8870] usb 4-1: config 0 descriptor?? [ 582.014982][T13704] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 582.121246][ T8897] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 582.247112][T13716] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 582.329946][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 582.329968][ T29] audit: type=1800 audit(1778844874.364:375): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2282" name="bus" dev="tmpfs" ino=373 res=0 errno=0 [ 583.096251][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 583.114440][ T8896] usb 2-1: USB disconnect, device number 79 [ 583.126809][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 583.200323][ T8896] usblp0: removed [ 583.527997][ T8897] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 583.553452][ T8897] uvcvideo 6-1:166.34: No valid video chain found. [ 583.608231][ T8897] usb 6-1: USB disconnect, device number 8 [ 583.767284][T13733] FAULT_INJECTION: forcing a failure. [ 583.767284][T13733] name failslab, interval 1, probability 0, space 0, times 0 [ 583.800687][T13733] CPU: 1 UID: 0 PID: 13733 Comm: syz.1.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.800725][T13733] Tainted: [L]=SOFTLOCKUP [ 583.800733][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 583.800746][T13733] Call Trace: [ 583.800755][T13733] [ 583.800764][T13733] dump_stack_lvl+0xe8/0x150 [ 583.800794][T13733] should_fail_ex+0x412/0x560 [ 583.800827][T13733] should_failslab+0xa8/0x100 [ 583.800862][T13733] __kmalloc_cache_noprof+0x88/0x660 [ 583.800892][T13733] ? copy_ipcs+0x1f9/0x6c0 [ 583.800917][T13733] copy_ipcs+0x1f9/0x6c0 [ 583.801023][T13733] ? copy_utsname+0x184/0x620 [ 583.801057][T13733] create_new_namespaces+0x210/0x6a0 [ 583.801084][T13733] ? bpf_lsm_capable+0x9/0x20 [ 583.801104][T13733] ? security_capable+0x7e/0x2c0 [ 583.801137][T13733] unshare_nsproxy_namespaces+0x149/0x190 [ 583.801164][T13733] ksys_unshare+0x57d/0x9f0 [ 583.801204][T13733] ? __pfx_ksys_unshare+0x10/0x10 [ 583.801230][T13733] ? __pfx_ksys_write+0x10/0x10 [ 583.801266][T13733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.801288][T13733] __x64_sys_unshare+0x38/0x50 [ 583.801315][T13733] do_syscall_64+0x15f/0xf80 [ 583.801343][T13733] ? trace_irq_disable+0x3b/0x140 [ 583.801374][T13733] ? clear_bhb_loop+0x40/0x90 [ 583.801400][T13733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.801420][T13733] RIP: 0033:0x7f20dd79ce59 [ 583.801442][T13733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.801460][T13733] RSP: 002b:00007f20de6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 583.801483][T13733] RAX: ffffffffffffffda RBX: 00007f20dda15fa0 RCX: 00007f20dd79ce59 [ 583.801499][T13733] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 583.801512][T13733] RBP: 00007f20de6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 583.801533][T13733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.801545][T13733] R13: 00007f20dda16038 R14: 00007f20dda15fa0 R15: 00007f20ddb3fa48 [ 583.801579][T13733] [ 584.046221][ T29] audit: type=1326 audit(1778844876.084:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.110373][ T29] audit: type=1326 audit(1778844876.084:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.233896][ T29] audit: type=1326 audit(1778844876.114:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.335589][ T29] audit: type=1326 audit(1778844876.114:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.400912][ T29] audit: type=1326 audit(1778844876.114:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.483676][ T29] audit: type=1326 audit(1778844876.114:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.563952][ T29] audit: type=1326 audit(1778844876.114:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.613441][ T8870] usbhid 4-1:0.0: can't add hid device: -71 [ 584.628365][ T8870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 584.666114][ T29] audit: type=1326 audit(1778844876.114:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 584.691962][ T8875] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 584.704747][ T8870] usb 4-1: USB disconnect, device number 79 [ 584.774458][ T29] audit: type=1326 audit(1778844876.114:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13734 comm="syz.5.2293" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1839ce59 code=0x7ffc0000 [ 585.043368][T13748] syzkaller0: entered promiscuous mode [ 585.053099][T13748] syzkaller0: entered allmulticast mode [ 585.070108][ T8897] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 585.240908][ T8897] usb 2-1: Using ep0 maxpacket: 32 [ 585.266659][ T8897] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=1a.51 [ 585.287964][T13753] sctp: [Deprecated]: syz.3.2299 (pid 13753) Use of int in max_burst socket option deprecated. [ 585.287964][T13753] Use struct sctp_assoc_value instead [ 585.305760][ T8897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.328117][ T8897] usb 2-1: Product: syz [ 585.346984][ T8897] usb 2-1: Manufacturer: syz [ 585.365988][ T8897] usb 2-1: SerialNumber: syz [ 585.408610][ T8897] usb 2-1: config 0 descriptor?? [ 585.442488][ T8897] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 585.635984][T13750] Cannot find add_set index 2 as target [ 585.671676][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'. [ 585.696482][ T8897] gspca_sn9c2028: read1 error -71 [ 585.708723][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'. [ 585.721957][ T8897] gspca_sn9c2028: read1 error -71 [ 585.733423][ T8897] gspca_sn9c2028: read1 error -71 [ 585.747696][ T8897] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 585.796846][ T8897] usb 2-1: USB disconnect, device number 80 [ 586.930126][ T8897] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 587.099864][ T8897] usb 6-1: Using ep0 maxpacket: 32 [ 587.111262][ T8897] usb 6-1: config 123 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 587.140184][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2311'. [ 587.151863][ T8897] usb 6-1: config 123 interface 0 has no altsetting 0 [ 587.169950][ T8897] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 587.193901][ T8897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.220302][ T8897] usb 6-1: Product: syz [ 587.232094][ T8897] usb 6-1: Manufacturer: syz [ 587.243491][ T8897] usb 6-1: SerialNumber: syz [ 587.340185][ T8875] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 587.521119][ T8875] usb 3-1: Using ep0 maxpacket: 8 [ 587.560345][ T8875] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 587.587089][ T8875] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 587.629598][ T8875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.649823][ T8875] usb 3-1: Product: syz [ 587.659127][ T8875] usb 3-1: Manufacturer: syz [ 587.675870][ T8875] usb 3-1: SerialNumber: syz [ 587.701446][T13800] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 587.715461][T13776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 587.729596][ T8875] usb 3-1: config 0 descriptor?? [ 587.784639][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.800811][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.941242][ T8897] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 587.970242][T13800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.007578][T13787] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 588.016772][ T8897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 588.019545][T13787] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 588.019571][T13787] CPU: 0 UID: 0 PID: 13787 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.049119][T13787] Tainted: [L]=SOFTLOCKUP [ 588.053481][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.063571][T13787] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 588.068986][T13787] Code: e0 c3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 78 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 d6 b6 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 588.088780][T13787] RSP: 0018:ffffc900033c7260 EFLAGS: 00010206 [ 588.094954][T13787] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44c303 [ 588.102934][T13787] RDX: 0000000000000000 RSI: ffffffff8e21de79 RDI: 00000000000000c0 [ 588.111104][T13787] RBP: ffffc900033c7418 R08: ffffc900033c7387 R09: 0000000000000000 [ 588.119081][T13787] R10: ffffc900033c7360 R11: fffff52000678e71 R12: 0000000000000068 [ 588.127335][T13787] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000678e64 [ 588.135520][T13787] FS: 00007f0e8a3086c0(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 588.144464][T13787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.151061][T13787] CR2: 000000110c3adb2f CR3: 00000000b1484000 CR4: 00000000003526f0 [ 588.159138][T13787] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.167180][T13787] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 588.175170][T13787] Call Trace: [ 588.178485][T13787] [ 588.181626][T13787] ? __mutex_lock+0x319/0x1550 [ 588.186443][T13787] ? ktime_get+0x45/0x220 [ 588.190804][T13787] ? dvb_usbv2_generic_write+0x26/0x60 [ 588.196282][T13787] ? ktime_get+0x45/0x220 [ 588.200660][T13787] ? __pfx___mutex_lock+0x10/0x10 [ 588.205705][T13787] ? __pfx___mutex_lock+0x10/0x10 [ 588.210747][T13787] ? __pfx_clockevents_program_event+0x10/0x10 [ 588.216912][T13787] dvb_usbv2_generic_write+0x26/0x60 [ 588.222212][T13787] mxl111sf_ctrl_msg+0x160/0x2f0 [ 588.227162][T13787] mxl111sf_write_reg+0xa9/0x1b0 [ 588.232109][T13787] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 588.237673][T13787] mxl111sf_i2c_xfer+0x496/0x5100 [ 588.242713][T13787] ? __lock_acquire+0x6b5/0x2cf0 [ 588.247658][T13787] ? __lock_acquire+0x6b5/0x2cf0 [ 588.252612][T13787] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 588.258091][T13787] ? is_bpf_text_address+0x26/0x2b0 [ 588.263311][T13787] ? is_bpf_text_address+0x26/0x2b0 [ 588.268537][T13787] ? is_bpf_text_address+0x292/0x2b0 [ 588.273854][T13787] ? is_bpf_text_address+0x26/0x2b0 [ 588.279102][T13787] ? kernel_text_address+0xa5/0xe0 [ 588.284268][T13787] ? __kernel_text_address+0xd/0x30 [ 588.289497][T13787] ? unwind_get_return_address+0x4d/0x90 [ 588.295599][T13787] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 588.301942][T13787] ? arch_stack_walk+0xfb/0x150 [ 588.306816][T13787] ? look_up_lock_class+0x57/0x110 [ 588.311941][T13787] ? register_lock_class+0x31/0x2e0 [ 588.317154][T13787] ? __lock_acquire+0x6b5/0x2cf0 [ 588.322113][T13787] ? kasan_save_track+0x4f/0x80 [ 588.326982][T13787] ? kasan_save_track+0x3e/0x80 [ 588.331858][T13787] ? __kasan_kmalloc+0x93/0xb0 [ 588.336655][T13787] ? __kmalloc_noprof+0x35c/0x760 [ 588.341706][T13787] ? i2cdev_read+0xe8/0x250 [ 588.346234][T13787] ? vfs_read+0x20c/0xa70 [ 588.350584][T13787] ? __x64_sys_pread64+0x199/0x230 [ 588.355706][T13787] ? do_syscall_64+0x15f/0xf80 [ 588.360634][T13787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.366726][T13787] __i2c_transfer+0x79a/0x1f70 [ 588.371503][T13787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 588.377324][T13787] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 588.383152][T13787] ? i2c_transfer+0xc8/0x2d0 [ 588.387771][T13787] i2c_transfer+0x1cc/0x2d0 [ 588.392471][T13787] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 588.398120][T13787] ? trace_kmalloc+0x2a/0xf0 [ 588.402727][T13787] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 588.408892][T13787] ? i2cdev_read+0xe8/0x250 [ 588.413430][T13787] ? __kmalloc_noprof+0x1b8/0x760 [ 588.418465][T13787] i2cdev_read+0x10d/0x250 [ 588.422894][T13787] ? __pfx_i2cdev_read+0x10/0x10 [ 588.427848][T13787] vfs_read+0x20c/0xa70 [ 588.432044][T13787] ? __pfx_vfs_read+0x10/0x10 [ 588.436731][T13787] ? __fget_files+0x2a/0x420 [ 588.441611][T13787] ? __fget_files+0x2a/0x420 [ 588.446225][T13787] ? __fget_files+0x3a0/0x420 [ 588.450923][T13787] ? __fget_files+0x2a/0x420 [ 588.455585][T13787] __x64_sys_pread64+0x199/0x230 [ 588.460584][T13787] ? __pfx___x64_sys_pread64+0x10/0x10 [ 588.466087][T13787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.472224][T13787] do_syscall_64+0x15f/0xf80 [ 588.476867][T13787] ? trace_irq_disable+0x3b/0x140 [ 588.482023][T13787] ? clear_bhb_loop+0x40/0x90 [ 588.486739][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.492741][T13787] RIP: 0033:0x7f0e8939ce59 [ 588.497179][T13787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.517091][T13787] RSP: 002b:00007f0e8a308028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 588.525726][T13787] RAX: ffffffffffffffda RBX: 00007f0e89615fa0 RCX: 00007f0e8939ce59 [ 588.533722][T13787] RDX: 00000000000000cf RSI: 0000200000000700 RDI: 0000000000000004 [ 588.541719][T13787] RBP: 00007f0e89432d6f R08: 0000000000000000 R09: 0000000000000000 [ 588.549729][T13787] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 588.558173][T13787] R13: 00007f0e89616038 R14: 00007f0e89615fa0 R15: 00007f0e8973fa48 [ 588.566203][T13787] [ 588.569252][T13787] Modules linked in: [ 588.574576][T13787] ---[ end trace 0000000000000000 ]--- [ 588.617169][T13806] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 588.629722][T13787] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 588.635349][T13787] Code: e0 c3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d d0 78 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 d6 b6 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 588.676140][T13787] RSP: 0018:ffffc900033c7260 EFLAGS: 00010206 [ 588.683806][T13787] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44c303 [ 588.691878][ T8897] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 588.691921][ T8897] usb 6-1: media controller created [ 588.745969][ T8897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 588.754762][T13787] RDX: 0000000000000000 RSI: ffffffff8e21de79 RDI: 00000000000000c0 [ 588.804156][ T8897] set interface failed [ 588.812780][T13787] RBP: ffffc900033c7418 R08: ffffc900033c7387 R09: 0000000000000000 [ 588.862178][T13787] R10: ffffc900033c7360 R11: fffff52000678e71 R12: 0000000000000068 [ 588.910930][T13787] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000678e64 [ 588.939753][T13787] FS: 00007f0e8a3086c0(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 588.973877][T13787] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.009758][T13787] CR2: 0000200000182030 CR3: 00000000b1484000 CR4: 00000000003526f0 [ 589.019792][T13787] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 589.029371][T13787] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 589.037578][ T8895] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 589.045575][T13787] Kernel panic - not syncing: Fatal exception [ 589.052307][T13787] Kernel Offset: disabled [ 589.056663][T13787] Rebooting in 86400 seconds..